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Register (SATA=D3SL:F2) siiisvadierdivid tenidusveria vi aads dates eineendnaceareinitivndess 547 
14.1.12PCNL_BAR—Primary Control Block Base Address Register 
(SATA=D3UtE 2) ccicescstierinah ra batotaattisunaat shane rites chee eaaratee sie aa tide ante bend 548 
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14.2 


14.3 


14.4 


14.1.13SCMD_BAR—Secondary Command Block Base Address 


Register (IDE D3USFL) wicives ccniaasasa iciaaeioniaesenies ive iaadis ta mais ada ciaes abeaaenie oe 548 
14.1.14SCNL_BAR—Secondary Control Block Base Address 

Register (1DE-D3LSE 1): vsics.cicscdanviat¥eta od saccetes cdananateanoned siesta debated ga eahuatiaes 548 
14.1.15BAR — Legacy Bus Master Base Address Register 

(SATASD393F2) s.gc5 nGo sc tys acing sat aindsdhcasaan he tealaes sacheasSsadeinda dea tastes commit 549 
14.1.16ABAR/SIDPBA1 — AHCI Base Address Register/Serial ATA Index 

Data Pair Base Address (SATA-D31:F2) .....ccccccceccceeeeeseeeeeeeeeeeeeeeeennesenntees 549 

14.1.16:1When SCC iS NOt OLR iiiieicicsiccciecieecdettecsteci eter daviiestaieetenenninee 549 

14:1,16:2When SCC 1S Ola csid. teeeiias cncdeniainieoneiged aneenbneiineiginaniee 550 
14.1.17SVID—Subsystem Vendor Identification Register (SATA-D31:F2)................ 550 
14.1.18SID—Subsystem Identification Register (SATA-D31:F2).........cceceee cece eee ees 550 
14.1.19CAP—Capabilities Pointer Register (SATA-D31:F2) ..........cccceeee cece nee e eee eee 550 
14.1.20INT_LN—Interrupt Line Register (SATA-D31:F2)..........ceceeeeeeee tenet eee teeta ees 551 
14.1.21INT_PN—Interrupt Pin Register (SATA-D31:F2) .......c cece ceee eee ee eee etree tenes 551 
14.1.221DE_TIM — IDE Timing Register (SATA-D31:F2) ........ cece cece eee ee nee ee eee ee aes 551 
14.1.23PID—PCI Power Management Capability Identification 

Register (SATASDS3UUF 2) isis icscassass deisedeaustia wi ataiediawinisea cisionia nds daadaeceipas 551 
14.1.24PC—PCI Power Management Capabilities Register 

(SATASD 32362) iciauss hctaeuleaiats Issac teceedi ie eecinien thie wadaneeanigiate inte aieienieuaae 552 
14.1.25PMCS—PCI Power Management Control and Status 

Register (SATA=D315F 2)... .cciseisrsdeidennnshnet MeataleicaacaluinncnehsieionycebsaaySeaestuad daa > 552 
14.1.26MSICI—Message Signaled Interrupt Capability | dentification (SATA-D31:F2) 553 
14.1.27MS|IMC—Message Signaled Interrupt Message Control (SATA-D31:F2)......... 554 
14.1.28MSIMA— Message Signaled Interrupt Message Address (SATA-D31:F2)....... 555 
14.1.29MSI|IMD—Message Signaled Interrupt Message Data (SATA-D31:F2) ............ 555 
14.1.30 MAP—Address Map Register (SATA-D31:F2).........ccceccece eee ene tenet eee ease eaee eae 556 
14.1.31PCS—Port Control and Status Register (SATA-D31:F2) ........:ccceceeeeee eee eens 556 
14.1.32SCLKCG - SATA Clock Gating Control Register ............ceeece eect nent tent ee eae 559 
14.1.33SCLKGC - SATA Clock General Configuration Register ..............:eceeeeseeee eens 560 

14.1.33.1SATACRO—SATA Capability Register 0 (SATA-D31:F2)..............8. 561 

14.1.33.2SATACR1—SATA Capability Register 1 (SATA-D31:F2) ..............4. 561 
14.1.34FLRCID—FLR Capability ID (SATA-D31:F2) ...... ccc eee terete eee tenets 562 
14.1.35FLRCLV—FLR Capability Length and Version (SATA-D31:F2).........::::eeeeeee ees 562 
14.1.36FLRC—FLR Control (SATA-D31:F2) oo... cece etter entre eee ene nea 563 
14.1.37 ATC—APM Trapping Control Register (SATA-D31:F2)........:cccecceee ee eee erent eens 563 
14.1.38ATS—APM Trapping Status Register (SATA-D31:F2)........cccceeeeee nent erence ees 564 
14.1.39SP Scratch Pad Register (SATA-D31:F2) .......cceccee cece eect eee eee ne ee teeeneeeae ties 564 
14.1.40BFCS—BIST FIS Control/Status Register (SATA-D31:F2) ........c cece ee cence ees 565 
14.1.41BFTD1—BIST FIS Transmit Datal Register (SATA-D31:F2) ...........ccceeeeee ees 567 
14.1.42 BFTD2—BIST FIS Transmit Data2 Register (SATA-D31:F2) .........:eceeeeee ees 567 
Bus Master IDE I/O Registers (D31:F2)........ cece etcetera 568 
14.2.1 BMIC[P,S]—Bus Master IDE Command Register (D31:F2) ............ccceee eee eee 569 
14.2.2 BMIS[P,S]—Bus Master IDE Status Register (D31:F2)...........ccccee eee ene ee eee 570 
14.2.3. BMID[P,S]—Bus Master IDE Descriptor Table Pointer 

REGISter (D3LEEZ ici vsciscleussagansieeeucdauacuseuie bach seeding cd tates wha ceahaea tewegealdale ysis 571 
14.2.4 AIR—AHCI Index Register (D31:F2) .......c cece etter e eee teeta teeter aes 571 
14.2.5 AIDR—AHCI Index Data Register (D31:F2)........ eee eee cece eee eee ene eeae nes 571 
Serial ATA Index/Data Pair Superset REQGiStersS......... cece cece eee e eens eee a teeta etn e nates 572 
14.3.1 SINDX - Serial ATA Index (D31:F2) ..... cece ener neers 572 
14.3.2 SDATA - Serial ATA Data (D31:F2) ...... ccc eee ee nee eect eee eae tenes 573 

14.3.2.1 PxSSTS—Serial ATA Status Register (D31:F2) ..........ccceceeene eee eras 574 

14.3.2.2 PxSCTL — Serial ATA Control Register (D31:F2) ........ ce ceee eee ee eee 575 

14,.3.2.3 PxSERR—Serial ATA Error Register (D31:F2)..........:ccccce eee ene teens 576 
AHCI Registers (DSL PF2) iscscsnincicsvis eeesmiscikaatiadsiimtwridus fivigtawensssabsasadenuia fe hindaeanes 577 
14.4.1 AHCI Generic Host Control Registers (D31:F2)..........c cece eeceeee eee eee ene eene eae 578 
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14.4.1.1 CAP—Host Capabilities Register (D31:F2)......... ce ceeece eee e nett teens 578 
14.4.1.2 GHC—Global I|CH9 Control Register (D31:F2)..........ccceece cece eee eee 580 
14.4.1.3 I|S—Interrupt Status Register (D31:F2) ........ cece cece eee eee ees 581 
14.4.1.4 Pl—Ports Implemented Register (D31:F2) ..........ccceee cece eect eee eee 582 
14.4.1.5 VS—AHCI Version (D31:F2) .....cccccecceceeceeeeeeeeeeeeae eee eeteaeeeennenteas 583 
14.4.1.6 CCC_CTL—Command Completion Coalescing Control 
Register (DSLtE2) isiissicsvios inde ca tsaandaiacgineies casteos tady sania didue taleedaaia’ 583 
14.4.1.7 CCC_Ports—Command Completion Coalescing Ports 
Register (D3SLSF2) sii iieietiamriesistiaaenere se 0ita Sides kdionteiaieriarariiet 584 
14.4.1.8 EM_LOC—Enclosure Management Location Register (D31:F2) ....... 584 
14.4.1.9 EM_CTRL—Enclosure Management Control Register (D31:F2) ....... 585 
14.4.2 Vendor Specific Registers (D31:F2)........ cece ete n cece eee teen eee eeae teeta 586 
14.4.2.1 VSP—Vendor Specific (D31:F2) ....... cece cece eee eee teen eneenaaes 586 
14.4.3 Port: Registers (D31iF 2) vsisecistissessiasacisiasicivis iets ip tata baadsaandavetasgieagn cites ba re 586 
14.4.3.1 PxCLB—Port [5:0] Command List Base Address Register 
CDS LERZ va cea untrelaat anor nt atest naatscadataghsiowaatn ak fa atiaa Senin gmiven et ecaear 589 
14.4.3.2 PxCLBU—Port [5:0] Command List Base Address Upper 
32-Bits Register (D31:F2) ...... cece ence e eee e eee e eee teen a tee ena 589 


14.4.3.3 PxFB—Port [5:0] FIS Base Address Register (D31:F2)...............045 590 
14.4.3.4 PxFBU—Port [5:0] FIS Base Address Upper 32-Bits 
Register (DSLtE2) ii kaciiieinvistansisaaptiviassciiawssewd ease vein panna elera saa 590 
14.4.3.5 PxlS—Port [5:0] Interrupt Status Register (D31:F2)...............05 591 
14.4.3.6 PxlE—Port [5:0] Interrupt Enable Register (D31:F2)........0......05 592 
14.4.3.7 PxCMD—Port [5:0] Command Register (D31:F2).............ccceeeeee eee 594 
14.4.3.8 PxTFD—Port [5:0] Task File Data Register (D31:F2) ...............005 597 
14.4.3.9 PxSIG—Port [5:0] Signature Register (D31:F2)...........c cece eee 598 
14.4.3.10PxSSTS—Port [5:0] Serial ATA Status Register (D31:F2).............. 599 
14.4.3.11PxSCTL — Port [5:0] Serial ATA Control Register (D31:F2)........... 600 
14.4.3.12PxSERR—Port [5:0] Serial ATA Error Register (D31:F2)............... 601 
14.4.3.13PxSACT—Port [5:0] Serial ATA Active (D31:F2) .......... cece eee 603 
14.4.3.14PxCl—Port [5:0] Command Issue Register (D31:F2).............:0085 603 
15 SATA Controller Registers (D31:F5) ............c ccc cee ener nner ene ete teens 605 
15.1 PCI Configuration Registers (SATA-D31:F5)........cccccece ce te nee e ete eee eae tease e tee enaes 605 
15.1.1 VID—Vendor Identification Register (SATA—D31:F5) ........cceeeeeeee eee ee eee eee 606 
15.1.2 DIlID—Device Identification Register (SATA—D31:F5) .........ccceceeee eee cnet eens 607 
15.1.3  PCICMD—PCI Command Register (SATA-D31:F5) .......ceeceeeee eee ee eee ee eee ee eee 607 
15.1.4 PCISTS — PCI Status Register (SATA-D31:F5) ........ccce cece cence eee ene eee e teens 608 
15.1.5 RID—Revision Identification Register (SATA—D31:F5)........ cece eens erence eee 608 
15.1.6 Pl—Programming Interface Register (SATA-D31:F5)........ cece cence erence eee 609 
15.1.7  SCC—Sub Class Code Register (SATA-D31:F5) .......ccceeeeeeeeee eee ene earns eae ees 609 
15.1.8 BCC—Base Class Code Register (SATA-D31:F5) .......cceceeceee cece eee ee tenet ee eae 609 
15.1.9 PMLT—Primary Master Latency Timer Register (SATA-D31:F5).............000 610 
15.1.10PCMD_BAR—Primary Command Block Base Address 
Register (SATA=D31F 5) acsccexscciareinca i widaerecacraiuieaeeeias ria advansa badweuyes ca8s 610 
15.1.11PCNL_BAR—Primary Control Block Base Address Register 
E571) gic 9 sc [ey 2) Aaa ee nee ORE OP oR eo TREY PEE RE Ea Rene: 610 
15.1.12SCMD_BAR—Secondary Command Block Base Address 
Register (IDE D3LOEL): viiitsdietiviav aastehie ed ih eida De kveethad atadesvd deme enev eee 611 
15.1.13SCNL_BAR—Secondary Control Block Base Address 
Register (IDE DSLTHFL) tes eicisnciiviaidssagiansaiaiiansateinad cian sinusaaniaadas Denigeweiaes oh 611 
15.1.14BAR — Legacy Bus Master Base Address Register 
(SATA 3 WES itis cvaaaescanues teats ec cetata tent sainciate ce tin beat eGaabaiteis van teaeeen lage ans 612 
15.1.15SIDPBA — SATA Index/Data Pair Base Address Register 
(SATA DST SE 5) et cncsvatcate conve suiteeatautatenae Secuiataaat eee ateatnac ane yeyieass cxtuarciet gece 612 
15.1.16SVID—Subsystem Vendor Identification Register 
(SATASDS LEED) ia ccscy candats cotcstooe sided cud aaa usaeratiaianastaeenetasuacane tenia dt astuatutaa ce 613 
15.1.17SI1D—Subsystem Identification Register (SATA-D31:F5) ........ceceeeeee eee ee eae 613 
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15.1.18CAP—Capabilities Pointer Register (SATA-D31:F5) ..........ccccece eee ene eee teen eee 613 
15.1.19INT_LN—Interrupt Line Register (SATA-D31:F5)..........:eceeeeeeee teen e eae ee teeta ees 613 
15.1.20INT_PN—Interrupt Pin Register (SATA-D31:F5) .......c cece ceee eee ne ee eee eee eae ee ees 613 
15.1.211DE_TIM — IDE Timing Register (SATA-D31:F5) .........ccceceeteee eee ee eee e ee eaees 614 
15.1.22PID—PCI Power Management Capability Identification 
Register (SATA=D312 Fb) ict sicast teslvesiiiacitnceeenctiaa.ca ken conee times aces aiedagaeauatae 614 
15.1.23PC—PCI Power Management Capabilities Register 
(SAMASD STF 5) is icut tide cettaas atatshacsacras cosiaaananentinta ach ace tehaadaaniny Reahenis camua than 614 
15.1.24PMCS—PCI Power Management Control and Status 
Register (SATA-D3i:F 5) isiissiasiiaiaveag aaetdesie cavalaasadesieadiaies sedi hiss weed aiGes 615 
15.1.25MID—Message Signal Interrupt Identifier (SATA-D31:F5) ..........cceceeee ener 615 
15.1.26MC—Message Signal Interrupt Message Control (SATA-D31:F5)..........:.0:08 616 
15.1.27MA—Message Signal Interrupt Message Address (SATA-D31:F5).........:::0:08 616 
15.1.28MD—Message Signal Interrupt Message Data (SATA-D31:F5)...........:ceeeees 616 
15.1.29MAP—Address Map Register (SATA-D31:F5)16..........ccecceceeeeee teeta eeeae ena 617 
15.1.30PCS—Port Control and Status Register (SATA-D31:F5) .........ececeeee eee ee eee eee 618 
15.1.31SATACRO— SATA Capability Register 0 (SATA-D31:F5) .......c cece eeeeeee eee ees 619 
15.1.32SATACR1— SATA Capability Register 1 (SATA-D31:F5) 00... ccc eee eee eee e ees 619 
15.1.33FLRCID— FLR Capability 1D (SATA-D31:F5) ....... cece cece ee eee eee e eee 619 
15.1.34FLRCLV— FLR Capability Length and Value (SATA-D31:F5) ..........ceeeeeeeee ees 620 
15.1.35FLRCTRL— FLR Control (SATA-D31:F5) 0.0... ec cee eee ee ee nett tees ee teat eee enae naa 620 
15.1.36ATC—APM Trapping Control Register (SATA-D31:F5)........:ccceeeeeee eee e eterna eee 621 
15.1.37 ATC—APM Trapping Control (SATA-D31:F5) ..... cece eter te eee ee neta eee 621 
15.2 Bus Master IDE I/O Registers (D31:F5)....... cece cece ere ners 622 
15.2.1 BMIC[P,S]—Bus Master IDE Command Register (D31:F5) ..........:ceeeeeeee eee 623 
15.2.2 BMIS[P,S]—Bus Master IDE Status Register (D31:F5)..........:cceceeeeee eee ee eens 624 
15.2.3 BMID[P,S]—Bus Master IDE Descriptor Table Pointer 
Register: (DS LiF Sw ic casisenagasevanieecedhgandsauabag deabtgage cbse wh geennge ne Ai orgenidanssaatondes 624 
15.3 AHCI Index Data Pair ReQisters...........ceccecee eter ee renee 625 
15.3.1 INDEX—AHCI Index Register (D31:F5) ...... cece eee eens cece eee eee eeeenee eas 625 
15.3.2 Data—AHCl Data Register (D31:F5) ...... cece cence ete ne eee ee eae eee eaetnneenes 625 
15.4 Serial ATA Index/Data Pair Superset ReQiSters.......... cece eccete eter treet ee teeta eee e neta eee 626 
15.4.1 SINDX—SATA Index Register (D31:F5) .......ccceccecet eee e ne eee eee eee ete e ene eene nies 626 
15.4.2  SDATA—SATA Index Data Register (D31:F5) ........ cece eee eect ee eee teen enna 626 
15.4.2.1 PxSSTS—Serial ATA Status Register (D31:F5) ....... cece eect eee 627 
15.4.2.2 PxSCTL — Serial ATA Control Register (D31:F5) ........ cc ceeeeee eee ee 628 
15.4.2.3 PxSERR—Serial ATA Error Register (D31:F5)..........:c cece eee ene eee eee 629 
UHCI Controllers ReEGISters ciiciisi cis cceei ai icialeceneiyentiecediadadeebenad tnas deta dae eet eeeade heads 631 
16.1 PCI Configuration Registers 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2).......cccecceceeeeet esse eee e tee eee eee ea sent eae sneetee nae 631 
16.1.1 VID—Vendor Identification Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccceceecese esse eeeeaeeeeeeeaeeaneaeenes 632 
16.1.2 DID—Device Identification Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2).........cccceceecesteeeeeeeeaeeeeaeeaeenteaeeees 632 
6.1.3  PCICMD—PCI Command Register (USB—D29: FO/F1/F2/F3, D26:FO/F1/F2)...633 
16.1.4 PCISTS—PCI Status Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccceceeeeceeeeeeeeeeeeeeeeeaeeateaeenes 634 
16.1.5 RID—Revision Identification Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccceceeeeeteeeeeeeeeaeeeeeeeaeenteatenes 634 
16.1.6 Pl—Programming Interface Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccceceeceeteeeeeeeneeeeeeeaeeateaeenes 635 
16.1.7 SCC—Sub Class Code Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccceceeceet esse eeeeaeeeeeeeaeeateaeenes 635 
16.1.8 BCC—Base Class Code Register 
(USB—D29: FO/F1/F2/F3, D26:FO/FL/F2)........ccccccccesecteeeeeeeeeeeeeeeeaeeatentenes 635 
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16.2 


16.1.9 MLT—Master Latency Timer Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... eee eee ener eee teen eentaas 
16.1.10 HEADTYP—Header Type Register 

(USB—D29:FO/F1/F2/F3, D26:FO/FI/F2) 2... cece cece eee eee eee e teen een taas 
16.1.11BASE—Base Address Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece eect eee teen eee teen eeataas 
16.1.12SVID — Subsystem Vendor Identification Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) ...... cece ete eee eee eee teeta een taas 
16.1.13SID — Subsystem Identification Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) ...... cece eect eee eee e teen een ens 
16.1.14CAP_PTR—Capabilities Pointer 

(USB—D29:FO/F1/F2/F3, D26:FO/FI/F2) 2... cece e cece terete eee e teeta tes 
16.1.15INT_LN—Interrupt Line Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece cece cere teeta teeta eenenas 
16.1.16INT_PN—Interrupt Pin Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece e eee eee teen eeatas 
16.1.17FLRCID—Function Level Reset Capability ID 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) ....... cece cece eee eee teen teat teste ene eataes 
16.1.18FLRNCP—Function Level Reset Next Capability Pointer 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 1... cece ete e eee ee ene eee eee teen een taaes 
16.1.19FLRCLV—Function Level Reset Capability Length and Version 

(USB—D29:FO/F1/F2/F3, D26:FO/FI/F2) 10... cece eect teeta eee teen eeaeeas 
16.1.20USB_FLRCTRL—FLR Control Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) ...... cece ce eee eee eee ee eee ee eee eneeataes 
16.1.21USB_FLRSTAT—FLR Status Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) ...... ccc cee ceece cece eee tenet eee eee teens eanaes 
16.1.22USB_RELNUM—Serial Bus Release Number Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece cece eee eee eee ee ene eee eee teen anata 
16.1.23USB_LEGKEY—USB Legacy Keyboard/Mouse Control 

Register (USB—D29: FO/F1/F2/F3, D26:FO/FI/F2)....... eee ne eee ee eect teeta 
16.1.24USB_RES—USB Resume Enable Register 

(USB—D29:FO/F1/F2/F3, D26:FO/FI/F2) 2... cece ee eee eee e eee teeta ene ea tees 
16.1.25CWP—Core Well Policy Register 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece eee eee e teeta ene entnes 
16.1.26UCR1—UCHI Configuration Register 1 

(USB—D29: FO/F1/F2/F3, D26:FO/FI/F2) 2... cece cece eee eee e teeta ene eatnas 
USB I/O" REGIStENS is thinii ie fiat teak adie aera erie Ha een teal Wed hunidnenes isan 
16.2.1 USBCMD—USB Command ReGiSter ...........ccccccceee eee ne eee e rete ea teat teen tent tes 
16.2.2 USBSTS—USB Status Register ......... ccc eee e eee e teeta eee teat eee te ene eat tes 
16.2.3  USBINTR—USB Interrupt Enable ReQiSter 01.00... ccccccec eee ee cnet ne eae ee teeta nent ees 
16.2.4 FRNUM—Frame Number ReGiSter...........cceccece cee ee cere eee eater ee ee eet e nate ene ene ees 
16.2.5 FRBASEADD—Frame List Base Address ReQiSter ..........:.c:eceeeeseeeteeee ene eae ees 
16.2.6 SOFMOD—Start of Frame Modify Register ...........ceccceee eee ee eee ee eee ee teeta neat ees 
16.2.7 PORTSC[0,1]—Port Status and Control ReGiSter.............cceceeeeee scene ee eee ee eae 


EHCI Controller Registers (D29:F7, D26:F7) ..............cccceceeee eee ene ee tee eee eee ene teen eas 


17.1 


USB EHCI Configuration Registers (USB EHCI—D29:F7, D26:F7) ..........cceceeeeeeee eee 
17.1.1 VID—Vendor Identification Register 
(USB EHC] —D29:F7, D26:F7) ...ccceccccccc cece eee e ee eee tees ee ea tee tee san eateataeeaneatags 
17.1.2 DID—Device Identification Register 
(USB EHCI—D29:F7;. D26:F7) siavesscces icceviinas cise sta daers a eedaieiaeniceeiedieveeneaes 
17.1.3 PCICMD—PCI Command Register 
(USB EHGI=D29¢F7,:D26!F 2) tein ciutivienes tier cunevivwa ddaesviavaaaws Moadaee sea neceands 
4 PCISTS—PCI Status Register (USB EHCI—D29:F7, D26:F7) .........cecceeeeee eee 
5 RID—Revision Identification Register 
(USB EHCI=D29° EY (D260! EL). iscac tact accteattnas capieeas ottabecagacase teenie catuattiaacs 


17.1. 
17.1. 
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17.1.6 Pl—Programming Interface Register 

(USB EHC] —D29:F7, D26:F7).....cccccccce ce eee reece eee eee et eee ee tennant ent nee nneetennnnes 659 
17.1.7  SCC—Sub Class Code Register 

(USB EHCI=D292F 7, D2GSF7): cscsscsgaavscaeshenesnstiss sus toda tae danas vo esa de dedagh ahaa nonas 659 
17.1.8 BCC—Base Class Code Register 

(USB EHCI=D292F 7; D2G5F1) isi ccstatinccvshentsagtccteessga dens teuieecaereiitaex eases 659 
17.1.9 PMLT—Primary Master Latency Timer Register 

(USB EHCI—D29:F7; D2G2F7) isesiesceviisiiadissi cei veaiiddi neler aad onlay iaeaniaaies 660 
17.1.10MEM_BASE—Memory Base Address Register 

(USB. EHCI—D29:F7; D2G2F7) wticcsceviessiasasdiagei iaicsess desided dade Gardd is naannes 660 
17.1.11SVID—USB EHCI Subsystem Vendor ID Register 

(USB EHCI=D29:F 7, \D2G2F 7) tiisiter icine tivetnedee ed dae viddededeensbie oe vinden: 660 
17.1.12SID—USB EHCI Subsystem ID Register 

(USB EHCI=D29:F 7; ID2ZGIF 7) BievsderiseicGiines hacndoernihereeetadaawyaueneraae cnabededs 661 
17.1.13CAP_PTR—Capabilities Pointer Register 

(USB EHC]—D29:F7, D26:F7)......ccccccceece eee ee ene e eset ee eet eee ee tennant sateen nn eetennnnes 661 
17.1.14INT_LN—Interrupt Line Register 

(USB EHC] —D29:F7, D26:F7)......ccccccccece eee ee eee e eee eee eens ee ee een eet ent neeenentennnnes 661 
17.1.15INT_PN—Interrupt Pin Register 

(USB EHCI=D292F7, D2G2F7).3 visa dentate dantaksredeas one bhechenevencs kdetdae sauce ulas 661 
17.1.16PWR_CAPID—PCI Power Management Capability 1D 

Register (USB EHCI—D29:F7, D26:F7) ......ccccccecee cece cece ence ene e teen etre naenae 662 
17.1.17NXT_PTR1—Next Item Pointer #1 Register 

(USB EHC]—D29:F7, D26:F7)......ccccccccece eee ee eee e eee eee eens ee eee en eet ene nee enententnnes 662 
17.1.18PWR_CAP—Power Management Capabilities Register 

(USB EHC] —D29:F7, D26:F7).....cccccccc ect e terse neces eee eee en een ee nent et eneneeenennennnnes 663 
17.1.19PWR_CNTL_STS—Power Management Control/ 

Status Register (USB EHCI—D29:F7, D26:F7) 00... cece eect eee eee eaten ens 664 
17.1.20DEBUG_CAPID—Debug Port Capability ID Register 

(USB EHCI=D29:F7;.D2G65F 7) seiiavis ier tatiisans ciel deatovigl aitaiinaelib acer oes 665 
17.1.21NXT_PTR2—Next Item Pointer #2 Register 

(USB EHC] —D29:F7, D26:F7)......ccccccceece eters eee e eee ee eens ee ee een eetenteneeneetentnnes 665 
17.1.22DEBUG_BASE—Debug Port Base Offset Register 

(USB EHC] —D29:F7, D26:F7)......ccccccce ete ete neces ee ee eee een eee ee een eer eat nntenentennnnes 665 
17.1.23USB_RELNUM—USB Release Number Register 

(USB EHCI=D295F7; D2G2FL)isiisu die nencak inde Sonsdcsdbteidatineteuaiitscaeiatetuee saa ctaas 665 
17.1.24FL_ADJ —Frame Length Adjustment Register 

(USB EHCI=D292F 7, D2GIF2) iscsi sieeviesstadecsesters ate raavnetonnatiesatedebieateludauaes 666 
17.1.25PWAKE_CAP—Port Wake Capability Register 

(USB EHCI—D29: F7; D262 7) tisscsteviscivsiisiasaeieiciaaaiieiiadiaisaiee diadeeniies 667 
17.1.26LEG_EXT_CAP—USB EHCI Legacy Support Extended 

Capability Register (USB EHCI—D29:F7, D26:F7) .......cecece cece eee ne eee e teen ees 668 
17.1.27LEG_EXT_CS—USB EHCI Legacy Support Extended 

Control / Status Register (USB EHCI—D29:F7, D26:F7) ..........ccee eee eee ener eee 668 
17.1.28SPECIAL_SMI—Intel Specific USB 2.0 SMI Register 

(USB EHCI=—D29:F7,JD2G1F 1): ctiaedeaseieotakeavadin nce danea ie dadedn vies Ol wa Gated d 671 
17.1.29ACCESS_CNTL—Access Control Register 

(USB EHC] —D29:F7, D26:F7)......ccccccceece ete ee ene ee eset eee et entree ene en ent nee eneetenennes 673 
17.1.30EHCIIRI—EHCI Initialization Register 1 

(USB EHCI—D29: F7,..D2Z65F7 )iiscsacvtcsiscrciesa cadences cc sneie bv wesaniaienante sa aagatniaes 673 
17.1.31FLR_ClD—Function Level Reset Capability 1D 

(USB EHCI=D292F 7, D2GSEY) vs ciscscie teas sndsobadecdcasenag ebagvcusaata dics cushyanstnchunas 673 
17.1.32FLR_NEXT—Function Level Reset Next Capability Pointer 

(USB EHCI=D292F 7, D2GSFY) i. ivsasswee ciara nes tanddescusoiage vbabveuhahea dics hoekdaesntleunas 674 
17.1.33FLR_CLV—Function Level Reset Capability Length and Version 

(USB. EHCI—D29:F7, D268F7) iscsiciceveieedassaa hitesiieis aeieiea arena aaeeas 674 
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17.1.34FLR_CTRL—Function Level Reset Control Register 


(USB: EHCI—D29:F7,/D262F7)) csissasati san dunie davis da deaaiag datas iiss dn tae tadaaded sedh aoe 675 
17.1.35FLR_STS—Function Level Reset Status Register 
(USB: FHCI—D29°F 7, D2G2F7) sccsccsicececetaatoneas Mdedanis aga sintatanehievnets cae etanc 675 
17.1.36EHCIIR2—EHCI Initialization Register 2 
(USB: FHCI=D29°F 7, D262 F7) ick cant ote ce ieatteahe ates ducidiseaateidaned ate cia eens aseans 675 
17.2 Memory-Mapped I/O ReGiSters ......... ccc cece eter entree ener etree ed 676 
17.2.1 Host Controller Capability Registers ......... cee eect eect eee eee eee eee ee ena eee eaes 676 
17.2.1.1 CAPLENGTH—Capability Registers Length Register ..............::00 677 
17.2.1.2 HCIVERSION—Host Controller Interface Version Number 
REGISUCR:. cscctiarscisierniinds ciagtatniamins i cinennisetaniowe re tebeennentiguenanea cite 677 
17.2.1.3 HCSPARAMS—Host Controller Structural Parameters................0005 678 
17.2.1.4 HCCPARAMS—Host Controller Capability Parameters 
REGISUGl i.ai Grea adiuniad ena pidiieiehiad tied andes oh dlagraxe tome alelaiiees 679 
17.2.2 Host Controller Operational ReQiSters.......... cece eect eee eee nett eae ee teens 680 
17.2.2.1 USB2.0_CMD—USB 2.0 Command Register ...........ccceeee eee eee eae 681 
17.2.2.2 USB2.0_STS—USB 2.0 Status Register ........ cece eee eee 684 
17.2.2.3 USB2.0_INTR—USB 2.0 Interrupt Enable Register ................008 686 
17.2.2.4 FRINDEX—Frame Index ReQiSter......... cece cecee eect eect eee teat teen tenes 687 
17.2.2.5 CTRLDSSEGMENT—Control Data Structure Segment 
REGISUGM ici i Miasredeen eaiei act die ri sandcudes iat sad adbeiscvetedbedanendneeess 688 
17.2.2.6 PERIODICLISTBASE—Periodic Frame List Base Address 
REGISUCF: iiciiisessiicacdaviani anata iidaaaeia dain i naie asda de vibe sites deweala datas cata 688 
17.2.2.7 ASYNCLISTADDR—Current Asynchronous List Address 
RE GISUS have ssh aisted dante nsteiv'e Date ald na!s wie tccizunlctnne asad ein elude ea tons acne baghcle gers ate 689 
17.2.2.8 CONFIGFLAG—Configure Flag Register............cceeceeeeeeeeee eee teen ees 689 
17.2.2.9 PORTSC—Port N Status and Control Register .............::::ceeeeee eee 690 
17.2.3 USB 2.0-Based Debug Port Register ........... cece cece cece entree ee teen teat teen teat ees 694 
17.2.3.1 CNTL_STS—Control/Status Register ....... eee cece eee eens 695 
17.2.3.2 USBPID—USB PIDs Register .......... cece cece eect eee tree teeta ete eneeatees 697 
17.2.3.3  DATABUF[7:0]—Data Buffer Bytes[7:0] Register..............:ccceeeee 697 
17.2.3.4 CONFIG—Configuration Register ...........ccceceecee teen eee eee ee eae nae ee ees 697 
18 Intel® High Definition Audio Controller Registers (D27:FO) .............cccccccssseseceeseeees 699 
18.1 Intel® High Definition Audio PCI Configuration Space 
(Intel® High Definition AUdio— D27:FO) ....c.cccccececeeeseseseeseeeneeseseeeteneteuessusssnanenens 699 
18.1.1 VID—Vendor Identification Register 
(Intel® High Definition Audio Controller—D27: FO) ...........cccceceeee cence ee eee tenes 701 
18.1.2 DIlD—Device Identification Register 
(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee sence ee eee eeneee 701 
18.1.3. PCICMD—PCI Command Register 
(Intel® High Definition Audio Controller—D27: FO) ...........ccceeee eee eens teeta eeaeee 701 
18.1.4 PCISTS—PCI Status Register 
(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee ee eee ene een ees 702 
18.1.5 RID—Revision Identification Register 
(Intel® High Definition Audio Controller—D27: FO) ...........ccccece eae eeee eee ene tenes 703 
18.1.6 Pl—Programming Interface Register 
(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee cence ee ene tenes 703 
18.1.7 SCC—Sub Class Code Register 
(Intel® High Definition Audio Controller—D27: FO) ..........:cccceee eee eeee eee ene tenes 703 
18.1.8 BCC—Base Class Code Register 
(Intel® High Definition Audio Controller—D27: FO) ...........ccceee eee eens eee eneeeaees 703 
18.1.9 CLS—Cache Line Size Register 
(Intel® High Definition Audio Controller—D27: FO) ...........ccceee eee sees eee eee eeees 703 
18.1.10LT—Latency Timer Register 
(Intel® High Definition Audio Controller—D27: FO) ...........ccceee eee cence ee ene tenes 704 
18.1.11HEADTYP—Header Type Register 
(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee eee ee eee enees 704 
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18.1.12HDBARL—Intel® High Definition Audio Lower Base Address Register 


(Intel® High Definition AUdiO—D27: FO) .....cccccccccceceeeeeseseseeeeeeeseeseseneneneneans 704 
18.1.13 HDBARU—Intel® High Definition Audio Upper Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence een eeae tees 704 
18.1.14SVID—Subsystem Vendor Identification Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccece eee eee eee eneeeae tees 705 
18.1.15SI1D—Subsystem Identification Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cece ce eee cnet eae eees 705 
18.1.16CAPPTR—Capabilities Pointer Register (Audio—D27:FO) .........cceeeeee ee eee ees 705 
18.1.17INTLN—Interrupt Line Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee ee tenet eae eees 706 
18.1.18INTPN—Interrupt Pin Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee ene eee eee 706 
18.1.19HDCTL—Intel® High Definition Audio Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee eee ee tenet eae eee 706 
18.1.20TCSEL—Traffic Class Select Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee teen ene 707 
18.1.21DCKCTL—Docking Control Register (Mobile Only) 

(Intel® High Definition Audio Controller—D27: FO) ...........ccceceeee eee ee tenet eae eees 707 
18.1.22DCKSTS—Docking Status Register (Mobile Only) 

(Intel® High Definition Audio Controller—D27: FO) ..........ccceececee ence een eee e tees 708 
18.1.23PID—PCI Power Management Capability |D Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence tenet eae eees 708 
18.1.24PC—Power Management Capabilities Register 

(Intel® High Definition Audio Controller—D27: FO) ..........cccccecee ence tenet eae eees 709 
18.1.25PCS—Power Management Control and Status Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee ence tenet eae eees 710 
18.1.26MID—MSI Capability 1D Register 

(Intel® High Definition Audio Controller—D27: FO) ........... cece cee ece eee nee eae tees 711 
18.1.27MMC—MSI Message Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccece cee ece eee ee teen eee 711 
18.1.28MMLA—MSI Message Lower Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ene eee ene ea eens 711 
18.1.29MMUA—MSI Message Upper Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee eee ene teen ene 711 
18.1.30MMD—MSI Message Data Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence tenet eae eees 712 
18.1.31PXID—PCI Express* Capability 1D Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccece cee ene eee cnet eae eees 712 
18.1.32PXC—PCI Express* Capabilities Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence tenet eae enes 712 
18.1.33DEVCAP—Device Capabilities Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee tenet eae eee 713 
18.1.34DEVC—Device Control Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee ene eeae nes 714 
18.1.35DEVS—Device Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee cnet ene eees 715 
18.1.36VCCAP—Virtual Channel Enhanced Capability Header 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee eee ee eee eee e eee 715 
18.1.37PVCCAP1—Port VC Capability Register 1 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee ee eee tenn eees 716 
18.1.38PVCCAP2 — Port VC Capability Register 2 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee nee e eee 716 
18.1.39PVCCTL — Port VC Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee eee eee cnet eae ees 716 
18.1.40PVCSTS—Port VC Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee ene teen ene 717 
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18.1.41 VCOCAP—VCO Resource Capability Register 


(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee eee ee ene eeaees 717 
18.1.42VCOCTL—VCO Resource Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee cence ee ene tenes 718 
18.1.43VCOSTS—VCO Resource Status Register 

(Intel® High Definition Audio Controller—D27: FO) ...........ccccece eee eee e reece tenes 718 
18.1.44VCiCAP—VCi Resource Capability Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee eee eneeenees 719 
18.1.45VCiCTL—VCi Resource Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........ccceeee eee eeee eee eneeenees 719 
18.1.46VCiISTS—VCi Resource Status Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceceeeeeeee retest eneee 720 


18.1.47RCCAP—Root Complex Link Declaration Enhanced 
Capability Header Register (Intel® High Definition Audio Controller—D27: FO) 720 
18.1.48ESD—Element Self Description Register 


(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee teeta eeaees 720 
18.1.49L1DESC—Link 1 Description Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee eee eneeeaees 721 
18.1.50L1ADDL—Link 1 Lower Address Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee ease eee ee cnet enees 721 
18.1.51L1ADDU—Link 1 Upper Address Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eens reece tenes 721 

18.2 Intel® High Definition Audio Memory Mapped Configuration Registers 

(Intel® High Definition AUdiO— D27:FO) ......cccccececueesesesesseeeeneeseseeeteceteanasssasnenenens 722 
18.2.1 GCAP—Global Capabilities Register 

(Intel® High Definition Audio Controller—D27: FO) ...........ccceeee eee ee eee ee eee enees 726 
18.2.2 VMIN—Minor Version Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee ee eee ene eenees 726 
18.2.3  VMAJ—Major Version Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceceeeeeeee eee eeeenees 726 
18.2.4 OUTPAY—Output Payload Capability Register 

(Intel® High Definition Audio Controller—D27: FO) ..........:cccceee eee eee eee eneeenees 727 
18.2.5 INPAY—Input Payload Capability Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee eee ee eee eneee 727 
18.2.6 GCTL—Global Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee ease eee ee eee eneee 728 
18.2.7 WAKEEN—Wake Enable Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee eee ene tenes 729 
18.2.8 STATESTS—State Change Status Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee eee eneeeaees 729 
18.2.9 GSTS—Global Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........:cccceee eee eeee eee eneeenees 730 
18.2.10 ECAP—Extended Capabilities (Mobile Only) 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee sence ee ene tenes 731 
18.2.11 OUTSTRMPAY—Output Stream Payload Capability 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eens eee eneeenees 731 
18.2.12INSTRMPAY—Input Stream Payload Capability 

(Intel® High Definition Audio Controller—D27: FO) ..........:ccceee eee ee eee ee eaten ees 732 
18.2.13INTCTL—Interrupt Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee ee ee eee ene tenes 733 
18.2.14INTSTS—Interrupt Status Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eens eee ene tenes 734 
18.2.15WALCLK—Wall Clock Counter Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccceee eee eeee eee ene tenes 734 
18.2.16SSYNC—Stream Synchronization Register 

(Intel® High Definition Audio Controller—D27: FO) ...........ccceeee eee eeee eee eneeenees 735 
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18.2.17 CORBLBASE—CORB Lower Base Address Register 


(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence eee teen eee 735 
18.2.18CORBUBASE—CORB Upper Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccece cece cette eee eens 736 
18.2.19 CORBWP—CORB Write Pointer Register 

(Intel® High Definition Audio Controller—D27: FO) ..........cccece cee ece eee ne eeae tees 736 
18.2.20CORBRP—CORB Read Pointer Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece eee ece eee ee eae eee 736 
18.2.21CORBCTL—CORB Control Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee ene eee eee eae eaes 737 
18.2.22 CORBST—CORB Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ene eee ene eae eees 737 
18.2.23 CORBSIZE—CORB Size Register 

Intel® High Definition Audio Controller—D27: FO) ..........ccccecececee ene eee eee tenes 737 
18.2.24RIRBLBASE—RIRB Lower Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ene ee tenet eae enes 738 
18.2.25RIRBUBASE—RIRB Upper Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccceece cee ece eee tenn eee 738 
18.2.26RIRBWP—RIRB Write Pointer Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee cnet een teen eee 738 
18.2.27RINTCNT—Response Interrupt Count Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee eee eee eae eees 739 
18.2.28RIRBCTL—RIRB Control Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee ee tenet eae eees 739 
18.2.29RIRBSTS—RIRB Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee ee tenet eae eees 740 
18.2.30RIRBSIZE—RIRB Size Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cece eect cnet eae 740 
18.2.311C—Immediate Command Register 

(Intel® High Definition Audio Controller—D27: FO) ...........ccececee ene eee cnet eae eees 740 
18.2.32IR—Immediate Response Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccceececee ence tenet eae enes 741 
18.2.33IRS—Immediate Command Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........cccceeecee ence tenet eae eees 741 
18.2.34DPLBASE—DMA Position Lower Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ...........cccececee eee eee eee teen eee 742 
18.2.35DPUBASE—DMA Position Upper Base Address Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cece cece eee eee eee 742 
18.2.36SDCTL—Stream Descriptor Control Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee eneeeae ene 743 
18.2.37SDSTS—Stream Descriptor Status Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence tenet eae eees 745 
18.2.38SDLPIB—Stream Descriptor Link Position in Buffer 

Register (Intel® High Definition Audio Controller—D27:FO) ........ccccccceeseeeeees 746 
18.2.39SDCBL—Stream Descriptor Cyclic Buffer Length Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee ene tenn eees 746 
18.2.40SDLVI—Stream Descriptor Last Valid Index Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ese ee tenet eae eees 747 
18.2.41SDFIFOW—Stream Descriptor FIFO Watermark Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee eee ee tenet eae eees 747 
18.2.42SDFIFOS—Stream Descriptor FIFO Size Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccece cee ece eee e teen ae ees 748 
18.2.43SDFM1T—Stream Descriptor Format Register 

(Intel® High Definition Audio Controller—D27: FO) ..........ccccececee ence tenet eee eees 749 
18.2.44SDBDPL—Stream Descriptor Buffer Descriptor List Pointer Lower Base 

Address Register (Intel® High Definition Audio Controller—D27:FO)............. 750 
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18.2.45SDBDPU—Stream Descriptor Buffer Descriptor List Pointer Upper Base 


Address Register (Intel® High Definition Audio Controller—D27: FO) ............ 750 
19 SMBus Controller Registers (D31:F3) .............cc ccc eect een ee teeta tee teae nes 751 
19.1 PCI Configuration Registers (SMBUS—D31:F3)........cccece tent eeeeeene eee ee teeta teat teens 751 
19.1.1 VID—Vendor Identification Register (SMBUS—D31:F3)...........cceeeeee neers 751 
19.1.2 DIlD—Device Identification Register (SMBUS—D31:F3) ..........cceee eee e renee eee 752 
19.1.3  PCICMD—PCI Command Register (SMBUS—D31:F3)..........cccceee scene teen eee ea ee 752 
19.1.4 PCISTS—PCI Status Register (SMBUS—D31:F3) ........ cece eeeee ete eee eee teens 753 
19.1.5 RID—Revision Identification Register (SMBUS—D31:F3)...........ccceeeee eee ees 753 
19.1.6 Pl—Programming Interface Register (SMBUS—D31:F3)..........cceeeee eee ee eee eee 754 
19.1.7 SCC—Sub Class Code Register (SMBUS—D31:F3)........cccceeee eee eeeee teen eee eees 754 
19.1.8 BCC—Base Class Code Register (SMBUS—D31:F3) ........ceceeeee eee e eee e nee e enna es 754 
19.1.9 SMBMBARO—D31_F3_SMBus Memory Base Address 0 (SMBus—D31:F3) ..... 754 
19.1.10SMBMBAR1—D31_F3_SMBus Memory Base Address 1 (SMBus—D31:F3) ..... 755 
19.1.11SMB_BASE— SMBus Base Address Register (SMBuS—D31:F3)..........:.c eee 755 
19.1.12SVID— Subsystem Vendor Identification Register (SMBus—D31:F2/F4)........ 755 
19.1.13SI1D—Subsystem Identification Register (SMBuS—D31:F2/FA4)............. ee 756 
19.1.14INT_LN—Interrupt Line Register (SMBUS—D31:F3) .......cceeeeece sete ene eee ee eae 756 
19.1.15INT_PN—Interrupt Pin Register (SMBUS—D31:F3).........cceeeeeeee eens ene ea eee ea es 756 
19.1.16HOSTC—Host Configuration Register (SMBUS—D31:F3) ..........c ce eeeee eee ee eae 757 
19.2 SMBus 1/O and Memory Mapped I/O ReGISters .........eceecce eee ete e teat teen eed 758 
19.2.1 HST _STS—Host Status Register (SMBUS—D31:F3)........ cece cece ee ene ee eee eae 759 
19.2.2 HST _CNT—Host Control Register (SMBUS—D31:F3) 10... cece eect nett ee eee eae 760 
19.2.3  HST_CMD—Host Command Register (SMBUS—D31:F3)........... cess eee e nent eae ee 762 
19.2.4 XMIT_SLVA—Transmit Slave Address Register (SMBus—D31:F3).............0 762 
19.2.5 HST _DO—Host Data 0 Register (SMBUS—D31:F3) ...... eee eect eee ne eee eae 762 
19.2.6 HST_D1—Host Data 1 Register (SMBUS—D31:F3) ...... eect cece ne eee ee eae 762 
a 2.7 Host_BLOCK_DB—Host Block Data Byte Register (SMBus—D31:F3) ............ 763 
9.2.8 PEC—Packet Error Check (PEC) Register (SMBUusS—D31:F3) .............:eeeeeee ees 763 
is 9 RCV_SLVA—Receive Slave Address Register (SMBuS—D31:F3)............::.008 764 
19.2.10SLV_DATA—Receive Slave Data Register (SMBUS—D31:F3) ..........ceceeeeee eee 764 
19.2.11AUX_STS—Auxiliary Status Register (SMBUS—D31:F3).........:cceeeeee ene e eee e eee 764 
19.2.12AUX_CTL—Auxiliary Control Register (SMBUS—D31:F3) .........cc cece eeeee eee eee ee 765 
19.2.13SMLINK_PIN_CTL—SMLink Pin Control Register (SMBus—D31:F3) .............. 765 
19.2.14SMBus_PIN_CTL—SMBus Pin Control Register (SMBus—D31:F3).............00.. 766 
19.2.15SLV_STS—Slave Status Register (SMBUS—D31:F3).......... cece eect tenet eee eee 766 
19.2.16SLV_CMD—Slave Command Register (SMBUS—D31:F3).........cceeeeene eee ee eee 767 
19.2.17NOTIFY_DADDR—Notify Device Address Register (SMBus—D31:F3) ............ 767 
19.2.18NOTIFY_DLOW—Notify Data Low Byte Register (SMBus—D31:F3)............... 768 
19.2.19NOTIFY_DHIGH—Notify Data High Byte Register (SMBus—D31:F3)............. 768 
20 PCI Express* Configuration Registers.................. cee ener ea 769 
20.1 PCI Express* Configuration Registers (PCI Express—D28:FO/F1/F2/F3/F4/F5) ......... 769 
20.1.1 VID—Vendor Identification Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5)...... cece eect eee ener eee ee eee neta eee 772 
20.1.2 DlID—Device Identification Register 
(PCI Express—D28: FO/F1/F2/F3/F4/F5)...... cece cece ee eee ee eee eae 772 
20.1.3. PCICMD—PCI Command Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5)...... cece cece eee ee eee ee eee eae 773 
20.1.4 PCISTS—PCI Status Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5)...... cece eee ee eects eee ee teen eee eaeaas 774 
20.1.5 RID—Revision Identification Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5)...... eect e eee ee eee ee teeta teeta ees 775 
20.1.6 Pl—Programming Interface Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5)...... cece cece eee eee teeta ete e teenies 775 
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20.1.7 SCC—Sub Class Code Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee cence eee n eens 


20.1.8 BCC—Base Class Code Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......c cece cc cee ee eee eee eenenes 


20.1.9 CLS—Cache Line Size Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc cece cee ee eee ee een eenenes 


20.1.10PLT—Primary Latency Timer Register 


(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5) .......ccc cece cee ee cence en eenenes 


20.1.11 HEADTYP—Header Type Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......ccccecceeee eee ee eee eee ene 


20.1.12BNUM—Bus Number Register 


(PCI Express—D28: FO/F1/F2/F3/F4/F5) .......ccc cece cee ee eee ee en een eens 


20.1.13SLT—Secondary Latency Timer 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc cece cee ee cence ee eenenes 


20.1.141OBL—I/O Base and Limit Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee cence ee eee ene 


20.1.15SSTS—Secondary Status Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) ........cc ccc ce eee ee eee eee een ene 


20.1.16MBL—Memory Base and Limit Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee cence ee eenenes 


20.1.17PMBL—Prefetchable Memory Base and Limit Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee eee eee e een enes 


20.1.18PMBU32—Prefetchable Memory Base Upper 32 Bits 


Register (PCI Express—D28: FO/F1/F2/F3/FA/F5).........0::ceeeee eee 


20.1.19PMLU32—Prefetchable Memory Limit Upper 32 Bits 


Register (PCI Express—D28: FO/F1/F2/F3/FA/F5)..........cccceeeeeee es 


20.1.20CAPP—Capabilities List Pointer Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc cece cee ee eee ee een een enes 


20.1.211INTR—Interrupt Information Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) ..... ccc cece cee ee eee ee een een enes 


20.1.22BCTRL—Bridge Control Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) ........cc ccc ee cee ee cence ee een eens 


20.1.23CLIST—Capabilities List Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee cence ee eenenes 


20.1.24XCAP—PCI Express* Capabilities Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc cece cee ee cence eee nenes 


20.1.25DCAP—Device Capabilities Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee eee ee eee een enes 


20.1.26DCTL—Device Control Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc ccc ce cee ee cence en eenenes 


20.1.27DSTS—Device Status Register 


(PCI Express—D28:FO/F1/F2/F3/FA/F5) .......ccc ccc ce cee ee cence ee eenenes 


20.1.28LCAP—Link Capabilities Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee eee ee een een enes 


20.1.29LCTL—Link Control Register 


(PCI Express—D28:FO/F1/F2/F3/F4/F5) .......ccc cece cee ee eee ee eee een ones 


20.1.30LSTS—Link Status Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) ..... ccc cece cee ee cence ee eee eens 


20.1.31SLCAP—Slot Capabilities Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee eee ee eee een enes 


20.1.32SLCTL—Slot Control Register 


(PCI Express—D28:FO/F1/F2/F3/FA4/F5) .......ccc cece cee ee eee ee en eenenes 


20.1.33SLSTS—Slot Status Register 


(PCI Express—D28: FO/F1/F2/F3/F4/F5) ........cc ccc ce cee ee eee ee ee een ones 


20.1.34RCTL—Root Control Register 


(PCI Express—D28: FO/F1/F2/F3/F4/F5) .......ccc ccc ce cee ee cence eee nenes 
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20.1.35RSTS—Root Status Register 


(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccceccceeeeeeeeeee eee eeeeeeeteaeeeeeneeaeaas 793 
20.1.36MID—Message Signaled Interrupt Identifiers Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccccccceee eee eeeee eet eeeeeeeeeateeeeeenaeeas 794 
20.1.37MC—Message Signaled Interrupt Message Control Register 

(PCI Express—D28: FO/F1/F2/F3/F4/F5).......ccccccceee eee eeeeeeeeeeeee eee eateeeenenaeeas 794 
20.1.38MA—Message Signaled Interrupt Message Address 

Register (PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......cccceceeee cece eee ee tees eae eee 794 
20.1.39MD—Message Signaled Interrupt Message Data Register 

(PCI Express—D28: FO/F1/F2/F3/F4/F5)......cccceccceeeeeeeeeee eee eeeeeeeeeateeeeneeaeaas 795 
20.1.40SVCAP—Subsystem Vendor Capability Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccccceceeceeeceeee eee eeeeeeeteaeeeeeeeeaeeas 795 
20.1.41SVID—Subsystem Vendor Identification Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccccccceeceeeeeeee eee eeeeeeetenteeeeeenaeeas 795 
20.1.42 PMCAP—Power Management Capability Register 

(PCI Express—D28: FO/F1/F2/F3/F4/F5)......ccccecceeee eee eeeee eee eeeeeeeneateeeeeeeaeeas 795 
20.1.43 PMC—PCI Power Management Capabilities Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccceccceeeeeeeeeee eet eeeeeeeeeeeeeeeeesaeaas 796 
20.1.44PMCS—PCI Power Management Control and Status 

Register (PCI Express—D28: FO/F1/F2/F3/FA/F5) .......cccceceeee cece eee nett eee eee 797 
20.1.45MPC2—Miscellaneous Port Configuration Register 2 

(PCI Express—D28: FO/F1/F2/F3/F4/F5)......ccccccccces eee eeeeeeeteeeeeeeeeateeeeeeeaeeas 798 
20.1.46MPC—Miscellaneous Port Configuration Register 

(PCI ExpresS—D28: FO/F1/F2/F3/F4/F5)......cccceccceee eee eeeee eet eeeeeeereateeeeneeaeaas 798 
20.1.47SMSCS—SMI/SCI Status Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccceccceeteeeeeeee eee eeeeeeereateeeeeeeaeaas 801 
20.1.48RPDCGEN—Root Port Dynamic Clock Gating Enable 

(PCI Express-D28:FO/F1/F2/F3/FA4/F5) ......ccccceceseeceeeeeeeeeeeeeeeaeeaeereaeeanenteas 802 
20.1.491PWS—Intel® PRO/Wireless 3945ABG Status 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccccccceeeeeeeseee eee eeeeeeeeenteeeeeeeneeas 802 
20.1.50PECR1—PCI Express* Configuration Register 1 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccccccceeeeeeeeee eee eaeeeeeteateeeeneeaenas 803 
20.1.51VCH—Virtual Channel Capability Header Register 

(PCI Express—D28: FO/F1/F2/F3/F4/F5)......cccceccceee eee eeeeeeeeeeeeeeeeeateeeeeeeaeaas 803 
20.1.52VCAP2—Virtual Channel Capability 2 Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccccccceeeeeeeeee eee eeeeeeetenteeeeeenaeeas 803 
20.1.53PVC—Port Virtual Channel Control Register 

(PCI Express—D28: FO/F1/F2/F3/F4/F5).......cccccccceeeeeeeee eee eeeee eet eateeeeeeeneeas 804 
20.1.54PVS—Port Virtual Channel Status Register 

(PCI ExpresS—D28: FO/F1/F2/F3/F4/F5)......cccccccceeeeeeeeee eee eeeeeeeeeateeeeeeeaeaas 804 
20.1.55VOCAP—Virtual Channel 0 Resource Capability Register 

(PCI ExpresS—D28: FO/F1/F2/F3/F4/F5)......cccceccceeteee eee ee eee eeeeeeereateeeeeenaeeas 804 
20.1.56VOCTL—Virtual Channel 0 Resource Control Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......cccccccceeeee eee ee eet eeeeeeeeeateeeeeenaeeas 805 
20.1.57VOSTS—Virtual Channel 0 Resource Status Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......cccccccceceeeeeeee eee eeeeeeetenteeeeeenaeeas 805 
20.1.58UES—Uncorrectable Error Status Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......ccccccceeee eee eeeeeeeeeeeeeeeeeaeeeeeeeeneeas 806 
20.1.59UEM—Uncorrectable Error Mask 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccccccceeeeeeeeee eee eeeeeeeteateneeeesaeaas 807 
20.1.60UEV — Uncorrectable Error Severity 

(PCI Express—D28: FO/F1/F2/F3/F4/F5).......ccccccceeeeeeeeeee eet eeeeeeeeeateeeeeenaeeas 808 
20.1.61CES — Correctable Error Status Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5).......ccccccceee eee eeeee eee eeeeeeeteateeeeeesaeeas 809 
20.1.62CEM — Correctable Error Mask Register 

(PCI ExpresSs—D28: FO/F1/F2/F3/F4/F5)......cccccceceee eee eeeee eee eeeeeeeeeaeeeeenenaeeas 809 
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20.1.63AECC — Advanced Error Capabilities and Control Register 


(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... cece ce eee ee eee eee neta eae 810 
20.1.64RES — Root Error Status Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... cece eee ee eee e cence eee ene e eee ee teeta 810 
20.1.65RCTCL — Root Complex Topology Capability List Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... cece eee ce eee e eect nett eee nett enna 810 
20.1.66ESD—Element Self Description Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) «0... cece cece tenet eee eee eee e nett eaes 811 
20.1.67ULD — Upstream Link Description Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) .......cccceccc ccc ce eee eee e ee eee eee ete teeta 811 
20.1.68ULBA — Upstream Link Base Address Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... cece ece cece eee erent et ee eee eee ee eae 812 
20.1.69PECR2 — PCI Express* Configuration Register 2 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... cece cece eect ene eee eee eee ee ene 812 
20.1.70PEETM — PCI Express* Extended Test Mode Register 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ....... ccc ete eee ee eect eee eee tee eee e eee ee tetas 812 
20.1.71PEC1 — PCI Express* Configuration Register 1 
(PCI Express—D28: FO/F1/F2/F3/FA4/F5) ...... ccc cece teen eee teen eet ee eee ee eee e eens 813 
High Precision Event Timer Registers.................:.:c cece eee ete eee eee e enna 815 
21.1 Memory Mapped ReGISters ..........cecceccee eee eee nnn eee ened teeta 815 
21.1.1 GCAP_!D—General Capabilities and Identification Register ................: eee 816 
21.1.2 GEN_CONF—General Configuration Register ............:ccceeeeee nent eee ee eee eter eae 817 
21.1.3 GINTR_STA—General Interrupt Status RegisSter............ccceeceeeee eet ee eee e eaten 817 
21.1.4 MAIN _CNT—Main Counter Value ReGiSter....... ce eee 818 
21.1.5 TIMn_CONF—Timer n Configuration and Capabilities Register .................005 818 
21.1.6 TIMn_COMP—Timer n Comparator Value ReQiSter ............c cece eee ee tent eee ee ene 820 
Serial Peripheral Interface (SPI) ..............c ccc cece een nent nena 821 
22.1 Serial Peripheral Interface Memory Mapped Configuration RegistersS...........:.::eeeeeeee 821 
22.1.1 BFPR -BIOS Flash Primary Region Register 
(SPI Memory Mapped Configuration ReQiStersS)...........:eceeeeeeee eens teen eee eee 822 
22.1.2 HSFS—Hardware Sequencing Flash Status Register 
(SPI Memory Mapped Configuration RegiSterS)...........ceceeeeeeee eee ee ene ea eee ee es 823 
22.1.3) HSFC—Hardware Sequencing Flash Control Register 
(SPI Memory Mapped Configuration RegiSterS)............cceceeeeeeee eee ee ene ea eee eee 824 
22.1.4 FADDR—Flash Address Register 
(SPI Memory Mapped Configuration ReQiSterS)............ceceeeeeeee estes teen e eee ee es 825 
22.1.5 FDATAO—Flash Data 0 Register 
(SPI Memory Mapped Configuration ReQiSterS)...........ceceeeeeeee eens etna eee ee es 825 
22.1.6 FDATAN—Flash Data [N] Register 
(SPI Memory Mapped Configuration RegistersS).............:cceceeee eee ee tenet ene eeae es 826 
22.1.7 FRAP—Flash Regions Access Permissions Register 
(SPI Memory Mapped Configuration RegiStersS)............cceceeeeeeee eee ee ene ea eee ee es 827 
22.1.8 FREGO—Flash Region 0 (Flash Descriptor) Register 
(SPI Memory Mapped Configuration ReQiSterS)...........ceceeeeeeeeeee nett eaten ees 828 
22.1.9 FREG1—Flash Region 1 (BIOS Descriptor) Register 
(SPI Memory Mapped Configuration RegisterS).............:cccceece eee eeee eee e ee eeae es 828 
22.1.10FREG2—Flash Region 2 (ME) Register 
(SPI Memory Mapped Configuration RegiSterS)...........cccceeeeeeee eee ee ene eae eee ee es 829 
22.1.11FREG3—Flash Region 3 (GbE) Register 
(SPI Memory Mapped Configuration RegistersS).............:ccecece eee en eee ee eee tenes 829 
22.1.12FREG4—Flash Region 4 (Platform Data) Register 
(SPI Memory Mapped Configuration RegiSterS)............cccceeeeeeee eens eneea eee eee 830 
22.1.13PRO—Protected Range O Register 
(SPI Memory Mapped Configuration RegiSterS)...........cceceeeeeeee teense neta eee eee 830 
22.1.14PR1—Protected Range 1 Register 
(SPI Memory Mapped Configuration RegisterS).............:cceeeeee eee ee eee eeeeeeeae es 831 
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22.1.15PR2—Protected Range 2 Register 


(SPI Memory Mapped Configuration Registers) .............cceeceeee cnet e neta een e eae 832 
22.1.16PR3—Protected Range 3 Register 
(SPI Memory Mapped Configuration Registers) ...........cceceeeee eee e nett teen e ene ees 833 
22.1.17PR4—Protected Range 4 Register 
(SPI Memory Mapped Configuration Registers) ...........ccceceeeeeeeeene eee ee eaten ees 834 
22.1.18SSFS—Software Sequencing Flash Status Register 
(SPI Memory Mapped Configuration Registers) ...........cceceeeeeeee ene ee teeta teat ees 835 
22.1.19SSFC—Software Sequencing Flash Control Register 
(SPI Memory Mapped Configuration Registers) ...........ccceceeeee cnet eee ee en een ees 836 
22.1.20PREOP—Prefix Opcode Configuration Register 
(SPI Memory Mapped Configuration Registers) .............ccceceeee cnet e eee eee tenn eee 837 
22.1.21OPTYPE—Opcode Type Configuration Register 
(SPI Memory Mapped Configuration Registers) .............c cece cece tenet ene tenn eee 837 
22.1.22 OPMENU—Opcode Menu Configuration Register 
(SPI Memory Mapped Configuration Registers) ...........ceceeeee eee e nett teeta neat ees 838 
22.1.23BBAR—BIOS Base Address Configuration Register 
(SPI Memory Mapped Configuration RegiStersS) ...........ceceeeee eee e eee teeta teat ees 839 
22.1.24FDOC—Flash Descriptor Observability Control Register 
(SPI Memory Mapped Configuration Registers) ...........ceeeceeeee tees nett teeta tent ees 839 
22.1.25FDOD—Flash Descriptor Observability Data Register 
(SPI Memory Mapped Configuration Registers) ...........ceceeeeeee eee e steer neta teat ees 840 
22.1.26AFC—Additional Flash Control Register 
(SPI Memory Mapped Configuration RegiStersS) ...........eceeeeeee cette eee e eaten tees 840 
22.1.27LVSCC— Host Lower Vendor Specific Component Capabilities Register 
(SPI Memory Mapped Configuration Registers) .............c cece cee ee eens tenet eae eaes 841 
22.1.28UVSCC— Host Upper Vendor Specific Component Capabilities Register 
(SPI Memory Mapped Configuration Registers) .............ccceceeeeeneeeee eee eeae eee 842 
22.1.29FPB — Flash Partition Boundary 
(SPI Memory Mapped Configuration Registers) ...........cccceeeee eee ene etree ene en ees 844 
22.2 Flash Descriptor REGiSters .........:cccece tet eee eee eed 845 
22.2.1 Flash Descriptor Content ic cccci iar daaecedineisadiiens ie esebiredeseeaReridaetebeee anne 845 
22.2.1.1 FLVALSIG - Flash Valid Signature Register 
(Flash Descriptor ReQiSters) ........c:cccece cece eee eee eee e eee seen eee eea eee 845 
22.2.1.2 FLMAPO - Flash Map O Register (Flash Descriptor Registers).......... 845 
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Intel® |CH9 Features 


Direct Media Interface 
— 10 Gb/s each direction, full duplex 


— Transparent to software 

PCI Express* 

— 6 PCI Express root ports 

— Supports PCI Express 1.1 

— Ports 1-4 can be statically configured as 4x1, or 1x4 

— Support for full 2.5 Gb/s bandwidth in each direction 
per x1 lane 

— Module based Hot-Plug supported 
(e.g., ExpressCard*) 

PCI Bus Interface 

— Supports PCI Rev 2.3 Specification at 33 MHz 

— Four available PCI REQ/GNT pairs 

— Support for 64-bit addressing on PCI using DAC 
protocol 

Integrated Serial ATA Host Controller 

— Up to six SATA ports 

— Data transfer rates up to 3.0 Gb/s 
(300 MB/s). 

— Integrated AHCI controller 


External SATA support 
— NEW: Port Disable Capability 


Intel® Matrix Storage Technology (ICH9R, ICH9DH, 
ICH9DO, ICH9M, and ICH9M-E only) 
— Configures the ICH9 SATA Controller as an AHCI 


controller 

— Configures the ICH9 SATA controller as a RAID 
controller supporting RAID 0/1/5/10 (Except ICH9M) 

Intel® High Definition Audio Interface 

— PCI Express endpoint 

— Independent Bus Master logic for eight general 
purpose streams: four input and four output 

— Support four external Codecs 

— Supports variable length stream slots 

— Supports multichannel, 32-bit sample depth, 192 kHz 
sample rate output 

— Provides mic array support 

— Allows for non-48 kHz sampling output 

— Support for ACPI Device States 

— Low Voltage Mode 

— Docking Support (ICH9M only) 

Intel® Quiet System Technology (Desktop only) 

— Four TACH signals and three PWM signals 

— NEW: Improved algorithms for better performance 


Simple Serial Transport (SST) 1.0 Bus and Platform 
Environmental Control Interface (PECI) (Desktop only) 


USB 2.0 

— NEW: Six UHCI Host Controllers, supporting up to 
twelve external ports 

— Two EHCI Host Controllers, supporting up to twelve 
external ports 

— Two Configuration Options for EHCI Controllers 6+6 
and 8+4 

— Per-Port-Disable Capability 

— Includes up to two USB 2.0 High-speed Debug Ports 

— Supports wake-up from sleeping states S1-S4 

— Supports legacy Keyboard/Mouse software 

Integrated Gigabit LAN Controller 


— Integrated ASF Management Controller 

— Network security with System Defense 

— Supports IEEE 802.3 

— LAN Connect Interface (LCI) and Gigabit LAN 
Connect Interface (GLCI) 

— 10/100/1000 Mbps Ethernet Support 

— NEW: Jumbo Frame Support 

Intel® Active Management Technology with System 

Defense (Digital Office only) 

— NEW: Network Outbreak Containment Heuristics 

Intel® I/O Virtualization (VT-d) support 

Intel® Trusted Execution Technology support 


Power Management Logic 
— Supports ACPI 3.0b 


— ACPI-defined power states (C1, C2, $1, S3-S5 for 
Desktop and C1-C6, S1, S3—-S5 for Mobile) 

— ACPI Power Management Timer 

— (Mobile Only) Support for “Intel SpeedStep® 
Technology” processor power control and “Deeper 
Sleep” power state 

— PCI CLKRUN# (Mobile only) and PME# support 

— SMI# generation 

— All registers readable/restorable for proper resume 
from 0 V suspend states 

— Support for APM-based legacy power management for 
non-ACPI Desktop and Mobile implementations 

External Glue Integration 

— Integrated Pull-up, Pull-down and Series Termination 
resistors on processor I/F 

— Integrated Pull-down and Series resistors on USB 

Enhanced DMA Controller 

— Two cascaded 8237 DMA controllers 

— Supports LPC DMA 
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SMBus 
— Faster speed, up to 100 kbps 


— Flexible SMBus/SMLink architecture to optimize for 
ASF 

— Provides independent manageability bus through 
SMLink interface 

— Supports SMBus 2.0 Specification 

— Host interface allows processor to communicate via 
SMBus 

— Slave interface allows an internal or external 
Microcontroller to access system resources 

— Compatible with most two-wire components that are 
also PC compatible 


High Precision Event Timers 
— Advanced operating system interrupt scheduling 


Timers Based on 82C54 
— System timer, Refresh request, Speaker tone output 


Real-Time Clock 

— 256-byte battery-backed CMOS RAM 

— Integrated oscillator components 

— Lower Power DC/DC Converter implementation 

System TCO Reduction Circuits 

— Timers to generate SMI# and Reset upon detection of 
system hang 

— Timers to detect improper processor reset 

— Integrated processor frequency strap logic 

— Supports ability to disable external devices 
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Interrupt Controller 
— Supports up to eight PCI interrupt pins 


— Supports PCI 2.3 Message Signaled Interrupts 

— Two cascaded 82C59 with 15 interrupts 

— Integrated I/O APIC capability with 24 interrupts 

— Supports Processor System Bus interrupt delivery 

1.05 V operation with 1.5 and 3.3 V I/O 

—5 V tolerant buffers on PCI, USB and selected Legacy 
signals 


1.05 V Core Voltage 


Five Integrated Voltage Regulators for different power 
rails 


Firmware Hub I/F supports BIOS Memory size up to 8 
MBytes 


Serial Peripheral Interface (SPI) 
— Supports up to two SPI devices 


— Supports 20 MHz and 33 MHz SPI devices 

— NEW: Dual erase support 

Low Pin Count (LPC) I/F 

— Supports two Master/DMA devices. 

— Support for Security Device (Trusted Platform 
Module) connected to LPC. 

GPIO 

— TTL, Open-Drain, Inversion 

— NEW: GPIO lock down 


Package 31x31 mm mixed-pitch 676 mBGA 
— Different footprint for Mobile 


Note: Not all features are available on all |CH9 components. See Section 1.3 for more details. 
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Note: 


Note: 


Note: 


1.1 


Table 1-1. 


intel. 
Introduction 


This document is intended for Original Equipment Manufacturers and BIOS vendors 
creating Intel® 1/O Controller Hub 9 (1CH9) Family based products. This document is 
for the following components: 


* Intel® 828011B ICH9 (1CH9) 

* Intel® 82801IR 1CH9 RAID (1CH9R) 

* Intel® 828011H ICH9 Digital Home (ICH9DH) 

* Intel® 8280110 ICH9 Digital Office (| CH9DO) 

* Intel® 828011BM ICH9 Mobile (1CH9M) 

* Intel® 828011EM ICH9 Mobile Enhanced (1CH9M-E) 


Section 1.3 provides high-level feature differences for the ICH9 Family components. 


Throughout this document, ICH9 is used as a general |CH9 term and refers to the Intel 
828011B ICHY, Intel 828011R ICH9R, and Intel 82801I1H ICH9DH, and Intel 8280110 
ICH9DO, Intel 82801IBM ICH9M, and Intel 828011EM ICH9M-E components, unless 
specifically noted otherwise. 


Throughout this document, the term “Desktop” refers to any implementation using a 
desktop version of the |CH9 (e.g. ICH9R), be it in a desktop, server, workstation, etc., 
unless specifically noted otherwise. 


Throughout this document, the term “Desktop Only” refers to information that is for the 
Intel 828011B ICH9, Intel 82801IR ICH9R, and Intel 82801I1H |CH9DH, and Intel 
8280110 ICH9DO unless specifically noted otherwise. The term “Digital Home 
Only“refers to information that is for the Intel 828011H ICH9DH, unless specifically 
noted otherwise. The term “Digital Office Only” refers to information that is for the Intel 
8280110 ICH9DO and Intel 82801I1BM ICH9M-E, unless specifically noted otherwise. 
The term “Mobile Only” refers to information that is for both the Intel 828011BM ICH9M 
and Intel 828011EM |CH9M-E, unless noted otherwise. 


About This Document 


This document is intended for Original Equipment Manufacturers and BIOS vendors 
creating Intel® 1CH9 family-based products (See Section 1.3 for currently defined | CH9 
components). This document assumes a working knowledge of the vocabulary and 
principles of PCI Express*, USB, AHCI, SATA, Intel® High Definition Audio (Intel® HD 
Audio), SMBus, PCI, ACPI and LPC. Although some details of these features are 
described within this manual, refer to the individual industry specifications listed in 
Table 1-1 for the complete details. 


Industry Specifications 


PCI Express* Base Specification, Revision 1.1 http://www. pcisig.com/specifications 


Low Pin Count Interface Specification, Revision | http://developer.intel.com/design/chipsets/ 
1.1 (LPC) industry/Ipc.htm 

System Management Bus Specification, Version : 

2.0 (SMBus) http: //www.smbus. org/specs/ 
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Table 1-1. Industry Specifications 
Specification Location 
PCI Local Bus Specification, Revision 2.3 (PCI) | http://www. pcisig.com/specifications 


PCI Mobile Design Guide, Revision 1.1 http://www. pcisig.com/specifications 


PCI Power Management Specification, Revision http://www. pcisig.com/specifications 


‘a 


Universal Serial Bus Specification (USB), 


Revision 2.0 http: // www.usb.org/developers/docs 


Advanced Configuration and Power Interface, 


Version 3.0b (ACPI) http://www.acpi.info/spec.htm 


Universal Host Controller Interface, Revision http: // developer. intel. com/technology/USB/ 
1.1 (UHCI) UHCI11D.htm 


Enhanced Host Controller Interface 
Specification for Universal Serial Bus, Revision 


http: //developer. intel. com/technology/usb/ 


1.0 (EHCI) ehcispec.htm 





Serial ATA Specification, Revision 1.0a http://www.serialata.org/specifications.asp 
Serial ATA Il: Extensions to Serial ATA 1.0, Hibs www. Seralatsorarspectications.A6 
Revision 1.0 Re : oe non 
Serial ATA Il Cables and Connectors Volume 2 : : pesos 

Gold http: //www.serialata.org/specifications.asp 
— Standard Format Specification, Version http: // www.dmtf.org/standards/asf 

IEEE 802.3 Fast Ethernet http: //standards.ieee. org/getieee802/ 

IA-PC HPET (High Precision Event Timers) http://www. intel.com/technology/architecture/ 
Specification, Revision 0.98a hpetspec.htm 


http: //www.trustedcomputinggroup.org/specs/ 


TPM Specification 1.02, Level 2 Revision 103 TPM 





Document users may also need to reference the following Intel Specification listed in 
Table 1-2 when using this document. 


Table 1-2. Intel Specification 


Intel® 1/O Controller Hub (1CH9) Family Datasheet www. intel.com/design/chipsets/ 
Specification Update specupdt/316973.htm 





Intel® 1/O Controller Hub (1CH9) Thermal and www. intel.com/design/chipsets/ 
Mechanical Design Guide designex/316974.htm 
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Chapter 1. Introduction 
Chapter 1 introduces the ICH9 and provides information on manual organization and 
gives a general overview of the ICH9. 


Chapter 2. Signal Description 

Chapter 2 provides a block diagram of the I|CH9/ICH9M and a detailed description of 
each signal. Signals are arranged according to interface and details are provided as to 
the drive characteristics (Input/Output, Open Drain, etc.) of all signals. 


Chapter 3. Intel® | CH9 Pin States 
Chapter 3 provides a complete list of signals, their associated power well, their logic 
level in each suspend state, and their logic level before and after reset. 


Chapter 4. Intel® |CH9 and System Clock Domains 
Chapter 4 provides a list of each clock domain associated with the ICH9 in an ICH9 
based system. 


Chapter 5. Functional Description 

Chapter 5 provides a detailed description of the functions in the |CH9. All PCI buses, 
devices and functions in this manual are abbreviated using the following nomenclature; 
Bus: Device: Function. This manual abbreviates a bus as BO, devices as D25, D26, D27, 
D28, D29, D30 and D31 and functions as FO, F1, F2, F3, F4, F5, F6 and F7. For example 
Device 31 Function 0 is abbreviated as D31:FO, Bus 0 Device 25 Function 0 is 
abbreviated as BO:D25:FO. Generally, the bus number will not be used, and can be 
considered to be Bus O. Note that the ICH9’s external PCI bus is typically Bus 1, but 
may be assigned a different number depending upon system configuration. 


Chapter 6. Ballout Definition 
Chapter 6 provides a table of each signal and its ball assignment in the 676-mBGA 
package. 


Chapter 7. Package Information 
Chapter 7 provides drawings of the physical dimensions and characteristics of the 676- 
mBGA package. 


Chapter 8. Electrical Characteristics 
Chapter 8 provides all AC and DC characteristics including detailed timing diagrams. 


Chapter 9. Register and Memory Mappings 
Chapter 9 provides an overview of the registers, fixed |/O ranges, variable |/O ranges 
and memory ranges decoded by the |CH9. 


Chapter 10. Chipset Configuration Registers 

Chapter 10 provides a detailed description of all registers and base functionality that is 
related to chipset configuration and not a specific interface (such as LPC, PCI, or PCI 
Express*). It contains the root complex register block, which describes the behavior of 
the upstream internal link. 


Chapter 11. PCI-to-PCI Bridge Registers 
Chapter 11 provides a detailed description of all registers that reside in the PCI-to-PCl 
bridge. This bridge resides at Device 30, Function 0 (D30:FO). 


Chapter 12. Integrated LAN Controller Registers 

Chapter 12 provides a detailed description of all registers that reside in the ICH9’s 
integrated LAN controller. The integrated LAN Controller resides at Device 25, Function 
0 (D25:F0). 
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Chapter 13. LPC Bridge Registers 

Chapter 13 provides a detailed description of all registers that reside in the LPC bridge. 
This bridge resides at Device 31, Function 0 (D31:FO). This function contains registers 
for many different units within the |CH9 including DMA, Timers, Interrupts, Processor 
Interface, GPIO, Power Management, System Management and RTC. 


Chapter 14. SATA Controller Registers 
Chapter 14 provides a detailed description of all registers that reside in the SATA 
controller #1. This controller resides at Device 31, Function 2 (D31:F2). 


Chapter 15. SATA Controller Registers 
Chapter 15 provides a detailed description of all registers that reside in the SATA 
controller #2. This controller resides at Device 31, Function 5 (D31:F5). 


Chapter 16. UHCI Controller Registers 

Chapter 16 provides a detailed description of all registers that reside in the six UHCI 
host controllers. These controllers reside at Device 29, Functions 0, 1, 2, and 3 
(D29:FO/F1/F2/F3) and Device 26, Function 0, 1 and 2 (D26:FO/F1/F2). 


Chapter 17. EHCI Controller Registers 

Chapter 17 provides a detailed description of all registers that reside in the two EHCI 
host controllers. These controllers reside at Device 29, Function 7 (D29:F7) and Device 
26, Function 7 (D26:F7). 


Chapter 18. SMBus Controller Registers 
Chapter 19 provides a detailed description of all registers that reside in the SMBus 
controller. This controller resides at Device 31, Function 3 (D31:F3). 


Chapter 19. Intel® High Definition Audio Controller Registers 
Chapter 18 provides a detailed description of all registers that reside in the Intel High 
Definition Audio controller. This controller resides at Device 27, Function 0 (D27:FO). 


Chapter 20. PCI Express* Port Controller Registers 
Chapter 20 provides a detailed description of all registers that reside in the PCI Express 
controller. This controller resides at Device 28, Functions 0 to 5 (D28:FO-F5). 


Chapter 21. High Precision Event Timers Registers 
Chapter 21 provides a detailed description of all registers that reside in the multimedia 
timer memory mapped register space. 


Chapter 22. Serial Peripheral I nterface Registers 
Chapter 22 provides a detailed description of all registers that reside in the SPI 
memory mapped register space. 


Chapter 23. Thermal Sensors 

Chapter 23 provides a detailed description of all registers that reside in the thermal 
sensors PCI configuration space. The registers reside at Device 31, Function 6 
(D31:F6). 
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1.2 Overview 


The ICH9 provides extensive I/O support. Functions and capabilities include: 
« PCI Express* Base Specification, Revision 1.1 support 


¢ PCI Local Bus Specification, Revision 2.3 support for 33 MHz PCI operations 
(supports up to four Req/Gnt pairs). 


e ACPI Power Management Logic Support, Revision 3.0b 
¢ Enhanced DMA controller, interrupt controller, and timer functions 


¢ Integrated Serial ATA host controllers with independent DMA operation on up to six 
ports (Desktop only) or four ports (Mobile only) and AHCI support. 


¢ USB host interface with support for up to twelve USB ports; six UHCI host 
controllers; two EHC! high-speed USB 2.0 Host controllers 


« Integrated 10/100/1000 Gigabit Ethernet MAC with System Defense 


« System Management Bus (SMBus) Specification, Version 2.0 with additional 
support for |7C devices 


* Supports Intel® High Definition Audio 


* Supports Intel® Matrix Storage Technology (Intel® |CH9R, |CH9DH, |CH9DO, 
ICH9M, and ICH9M-E Only) 


* Supports Intel® Active Management Technology (Digital Office only) 

* Supports Intel® Virtualization Technology for Directed 1/0 

¢ Supports Intel® Trusted Execution Technology 

¢ Low Pin Count (LPC) interface 

e Firmware Hub (FWH) interface support 

¢ Serial Peripheral Interface (SPI) support 

* Intel® Quiet System Technology (Desktop Only) 

e Integrated TPM 1.2 (Mobile Only) 
The Intel |CH9 incorporates a variety of PCI devices and functions, as shown in 
Table 1-3. They are divided into seven logical devices. The first is the DMI-To-PCI 
bridge (Device 30). The second device (Device 31) contains most of the standard PCI 
functions that always existed in the PCI-to-ISA bridges (South Bridges), such as the 
Intel PIIX4. The third and fourth (Device 29 and Device 26) are the USB host controller 
devices. The fifth (Device 28) is PCI Express device. The sixth (Device 27) is the HD 


Audio controller device, and the seventh (Device 25) is the Gigabit Ethernet controller 
device. 


Table 1-3. PCI Devices and Functions (Sheet 1 of 2) 
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Table 1-3. PCI Devices and Functions (Sheet 2 of 2) 





NOTES: 

1. The PCI-to-LPC bridge contains registers that control LPC, Power Management, System 
Management, GPIO, Processor Interface, RTC, Interrupts, Timers, and DMA 

2: Device 26:Function 2 maybe configured as Device 29:Function 3 during BIOS Post. 

3. SATA Controller 2 is only visible when D31:F2 CC.SCC=OlLh. 


48 Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


Introduction 


Li2id 


Note: 


Note: 


intel 


Capability Overview 
The following sub-sections provide an overview of the |CH9 capabilities. 


Direct Media I nterface (DMI) 


Direct Media Interface (DMI) is the chip-to-chip connection between the Memory 
Controller Hub / Graphics Memory Controller Hub ((G)MCH) and I/O Controller Hub 9 
(ICH9). This high-speed interface integrates advanced priority-based servicing allowing 
for concurrent traffic and true isochronous transfer capabilities. Base functionality is 
completely software-transparent, permitting current and legacy software to operate 
normally. 


PCI Express* Interface 


The ICH9 provides up to 6 PCI Express Root Ports, supporting the PCI Express Base 
Specification, Revision 1.1. Each Root Port supports 2.5 GB/s bandwidth in each 
direction (5 GB/s concurrent). PCI Express Root Ports 1-4 can be statically configured 
as four x1 Ports or ganged together to form one x4 port. Ports 5 and 6 can only be used 
as two x1 ports. On Mobile platforms, PCI Express Ports 1-4 can also be configured as 
one x2 port (using ports 1 and 2) with ports 3 and 4 configured as x1 ports. 


The integrated Gigabit Ethernet controllers data lines for 1000 Mb/s speed are 
multiplexed with PCI Express* Root Port 6 and therefore unavailable if a Gigabit 
Ethernet PHY is connected. The use of a 10/100 Mb/s PHY does not consume PCI 
Express Root Port 6 and therefore the port is available to be utilized as a x1 Port. 


Serial ATA (SATA) Controller 


The ICH9 has two integrated SATA host controllers that support independent DMA 
operation on up to six ports (desktop only) or four ports (mobile only) and supports 
data transfer rates of up to 3.0 Gb/s (300 MB/s). The SATA controller contains two 
modes of operation - a legacy mode using |/O space, and an AHCI mode using memory 
space. Software that uses legacy mode will not have AHCI capabilities. 


The ICH9 supports the Serial ATA Specification, Revision 1.0a. The ICH9 also supports 
several optional sections of the Serial ATA II: Extensions to Serial ATA 1.0 
Specification, Revision 1.0 (AHCI support is required for some elements). 


SATA Ports 2 and 3 are not functional in the |CH9 Base and Mobile components. See 
Section 1.3 for details on component feature availability. 


AHCI 


The ICH9 provides hardware support for Advanced Host Controller Interface (AHCI), a 
new programming interface for SATA host controllers. Platforms supporting AHCI may 
take advantage of performance features such as no master/slave designation for SATA 
devices—each device is treated as a master—and hardware-assisted native command 
queuing. AHCI also provides usability enhancements such as Hot-Plug. AHCI requires 
appropriate software support (e.g., an AHCI driver) and for some features, hardware 
support in the SATA device or additional platform hardware. See Section 1.3 for details 
on component feature availability. 


Intel® Matrix Storage Technology (Intel® 1CH9R, |CH9DH, ICH9DO, 
I1CH9M, and ICH9M-E Only) 


The ICH9 provides support for Intel® Matrix Storage Technology, providing both AHCI 
(see above for details on AHCI) and integrated RAID functionality. The industry-leading 
RAID capability provides high-performance RAID 0, 1, 5, and 10 functionality on up to 
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6 SATA ports of ICH9. Matrix RAID support is provided to allow multiple RAID levels to 
be combined on a single set of hard drives, such as RAID 0 and RAID 1 on two disks. 
Other RAID features include hot spare support, SMART alerting, and RAID 0 auto 
replace. Software components include an Option ROM for pre-boot configuration and 
boot functionality, a Microsoft Windows* compatible driver, and a user interface for 
configuration and management of the RAID capability of |CH9. Please see Section 1.3 
for details on component feature availability. 


Intel® Matrix Storage Technology RAID functionality not supported on |CH9M base 
component. 


PCI Interface 


The ICH9 PCI interface provides a 33 MHz, Revision 2.3 implementation. The ICH9 
integrates a PCI arbiter that supports up to four external PCI bus masters in addition to 
the internal |CH9 requests. This allows for combinations of up to four PCI down devices 
and PCI slots. 


Low Pin Count (LPC) Interface 


The ICH9 implements an LPC Interface as described in the LPC 1.1 Specification. The 
Low Pin Count (LPC) bridge function of the |CH9 resides in PCI Device 31:Function 0. In 
addition to the LPC bridge interface function, D31:FO contains other functional units 
including DMA, interrupt controllers, timers, power management, system management, 
GPIO, and RTC. 


Serial Peripheral I nterface (SPI) 


The ICH9 implements an SPI Interface as an alternative interface for the BIOS flash 
device. An SPI flash device can be used as a replacement for the FWH, and is required 
to support Gigabit Ethernet, Intel® Active Management Technology (Intel® |CH9DO 
and ICH9M-E only), and integrated Intel® Quiet System Technology (Desktop Only). 
The ICH9 supports up to two SPI flash devices with speed up to 33 MHz using two chip 
select pins. 


Compatibility Modules (DMA Controller, Timer/ Counters, Interrupt 
Controller) 


The DMA controller incorporates the logic of two 82C37 DMA controllers, with seven 
independently programmable channels. Channels 0-3 are hardwired to 8-bit, count-by- 
byte transfers, and channels 5-7 are hardwired to 16-bit, count-by-word transfers. Any 
two of the seven DMA channels can be programmed to support fast Type-F transfers. 
Channel 4 is reserved as a generic bus master request. 


The ICH9 supports LPC DMA, which is similar to |SA DMA, through the ICH9’s DMA 
controller. LPC DMA is handled through the use of the LDRQ# lines from peripherals 
and special encoding on LAD[3:0] from the host. Single, Demand, Verify, and 
Increment modes are supported on the LPC interface. 


The timer/counter block contains three counters that are equivalent in function to those 
found in one 82C54 programmable interval timer. These three counters are combined 
to provide the system timer function, and speaker tone. The 14.31818 MHz oscillator 
input provides the clock source for these three counters. 


The ICH9 provides an ISA-Compatible Programmable Interrupt Controller (PIC) that 
incorporates the functionality of two, 82C59 interrupt controllers. The two interrupt 
controllers are cascaded so that 14 external and two internal interrupts are possible. In 
addition, the |CH9 supports a serial interrupt scheme. 
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All of the registers in these modules can be read and restored. This is required to save 
and restore system state after power has been removed and restored to the platform. 


Advanced Programmable Interrupt Controller (API C) 


In addition to the standard ISA compatible Programmable Interrupt controller (PIC) 
described in the previous section, the |CH9 incorporates the Advanced Programmable 
Interrupt Controller (APIC). 


Universal Serial Bus (USB) Controllers 


The ICH9 contains up to two Enhanced Host Controller Interface (EHCI) host controllers 
that support USB high-speed signaling. High-speed USB 2.0 allows data transfers up to 
480 Mb/s which is 40 times faster than full-speed USB. The |CH9 also contains up to six 
Universal Host Controller Interface (UHCI) controllers that support USB full-speed and 
low-speed signaling. 


The ICH9 supports up to twelve USB 2.0 ports. All twelve ports are high-speed, full- 
speed, and low-speed capable. |CH9’s port-routing logic determines whether a USB 
port is controlled by one of the UHCI or EHC! controllers. See Section 5.18 and 
Section 5.19 for details. 


Gigabit Ethernet Controller 


The Gigabit Ethernet Controller provides a system interface via a PCI function. The 
controller provides a full memory-mapped or |O mapped interface along with a 64 bit 
address master support for systems using more than 4 GB of physical memory and 
DMA (Direct Memory Addressing) mechanisms for high performance data transfers. Its 
bus master capabilities enable the component to process high-level commands and 
perform multiple operations; this lowers processor utilization by off-loading 
communication tasks from the processor. Two large configurable transmit and receive 
FIFOs (up to 20 KB each) help prevent data underruns and overruns while waiting for 
bus accesses. This enables the integrated LAN controller to transmit data with 
minimum interframe spacing (IFS). 


The LAN controller can operate at multiple speeds (10/100/1000 MB/s) and in either 
full duplex or half duplex mode. In full duplex mode the LAN controller adheres with the 
IEEE 802.3x Flow Control Specification. Half duplex performance is enhanced by a 
proprietary collision reduction mechanism. See Section 5.3 for details. 


RTC 


The ICH9 contains a Motorola MC146818A-compatible real-time clock with 256 bytes of 
battery-backed RAM. The real-time clock performs two key functions: keeping track of 
the time of day and storing system data, even when the system is powered down. The 
RTC operates on a 32.768 KHz crystal and a 3 V battery. 


The RTC also supports two lockable memory ranges. By setting bits in the configuration 
space, two 8-byte ranges can be locked to read and write accesses. This prevents 
unauthorized reading of passwords or other system security information. 


The RTC also supports a date alarm that allows for scheduling a wake up event up to 30 
days in advance, rather than just 24 hours in advance. 


GPIO 


Various general purpose inputs and outputs are provided for custom system design. 
The number of inputs and outputs varies depending on ICH9 configuration. 
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Enhanced Power Management 


The ICH9’s power management functions include enhanced clock control and various 
low-power (suspend) states (e.g., Suspend-to-RAM and Suspend-to- Disk). A hardware- 
based thermal management circuit permits software-independent entrance to low- 
power states. The |CH9 contains full support for the Advanced Configuration and Power 
Interface (ACPI) Specification, Revision 3.0a. 


Intel® Active Management Technology (Intel® AMT) (Digital Office 
Only) 


Intel® Active Management Technology is the next generation of client manageability via 
the wired network. Intel AMT is a set of advanced manageability features developed as 
a direct result of 1T customer feedback gained through Intel market research. With the 
new implementation of System Defense in ICH9, the advanced manageability feature 
set of Intel AMT is further enhanced. Please see Section 1.3 for details on component 
feature availability. 


Manageability 


The ICH9 integrates several functions designed to manage the system and lower the 
total cost of ownership (TCO) of the system. These system management functions are 
designed to report errors, diagnose the system, and recover from system lockups 
without the aid of an external microcontroller. 


¢ TCO Timer. The ICH9’s integrated programmable TCO timer is used to detect 
system locks. The first expiration of the timer generates an SMI# that the system 
can use to recover from a software lock. The second expiration of the timer causes 
a system reset to recover from a hardware lock. 


¢ Processor Present I ndicator. The |CH9 looks for the processor to fetch the first 
instruction after reset. If the processor does not fetch the first instruction, the |CH9 
will reboot the system. 


¢« ECC Error Reporting. When detecting an ECC error, the host controller has the 
ability to send one of several messages to the |CH9. The host controller can 
instruct the |CH9 to generate either an SMI#, NMI, SERR#, or TCO interrupt. 


¢ Function Disable. The |CH9 provides the ability to disable the following integrated 
functions: LAN, USB, LPC, Intel HD Audio, SATA, PCI Express or SMBus. Once 
disabled, these functions no longer decode 1/O, memory, or PCI configuration 
space. Also, no interrupts or power management events are generated from the 
disabled functions. 


¢ Intruder Detect. The |CH9 provides an input signal (INTRUDER#) that can be 
attached to a switch that is activated by the system case being opened. The ICH9 
can be programmed to generate an SMI# or TCO interrupt due to an active 
INTRUDER# signal. 


System Management Bus (SMBus 2.0) 


The ICH9 contains an SMBus Host interface that allows the processor to communicate 
with SMBus slaves. This interface is compatible with most 1*C devices. Special 17C 
commands are implemented. 


The ICH9’s SMBus host controller provides a mechanism for the processor to initiate 
communications with SMBus peripherals (slaves). Also, the |CH9 supports slave 
functionality, including the Host Notify protocol. Hence, the host controller supports 
eight command protocols of the SMBus interface (see System Management Bus 
(SMBus) Specification, Version 2.0): Quick Command, Send Byte, Receive Byte, Write 
Byte/Word, Read Byte/Word, Process Call, Block Read/Write, and Host Notify. 
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ICH9’s SMBus also implements hardware-based Packet Error Checking for data 
robustness and the Address Resolution Protocol (ARP) to dynamically provide address 
to all SMBus devices. 


Intel® High Definition Audio Controller 


The Intel® High Definition Audio Specification defines a digital interface that can be 
used to attach different types of codecs, such as audio and modem codecs. The ICH9 
Intel® HD Audio controller supports up to 4 codecs. The link can operate at either 3.3 V 
or 1.5 V. 


With the support of multi-channel audio stream, 32-bit sample depth, and sample rate 
up to 192 kHz, the Intel® HD Audio controller provides audio quality that can deliver CE 
levels of audio experience. On the input side, the |CH9 adds support for an array of 
microphones. 


Intel® Quiet System Technology (Intel® QST) (Desktop Only) 


The ICH9 integrates four fan speed sensors (four TACH signals) and 3 fan speed 
controllers (three Pulse Width Modulator signals), which enables monitoring and 
controlling up to four fans on the system. With the new implementation of the single- 
wire Simple Serial Transport (SST) 1.0 bus and Platform Environmental Control 
Interface (PECI), the |CH9 provides an easy way to connect to SST-based thermal 
sensors and access the processor thermal data. In addition, coupled with the new 
sophisticated fan speed control algorithms, Intel® QST provides effective thermal and 
acoustic management for the platform. 


Intel® Quiet System Technology functionality requires a correctly configured system, 
including an appropriate (G)MCH with ME, ME firmware, and system BIOS support. 


Intel® Virtualization Technology for Directed I/ O (Intel® VT-d) 


The I1CH9 provides hardware support for implementation of Intel® Virtualization 
Technology with Directed I/O (Intel® VT-d). Intel VT-d Technology consists of 
technology components that support the virtualization of platforms based on Intel® 
Architecture Processors. Intel VT-d Technology enables multiple operating systems and 
applications to run in independent partitions. A partition behaves like a virtual machine 
(VM) and provides isolation and protection across partitions. Each partition is allocated 
it’s own subset of host physical memory. 


Integrated Trusted Platform Module (Mobile Only) 


The integrated Trusted Platform Module (TPM) implementation consists of firmware, 
Intel® Management Engine resources and dedicated hardware within the ICH and the 
(G)MCH. The integrated TPM supports all requirements of the TPM Specification Version 
1.2, Revision 103, as published by the Trusted Computing Group. The Integrated TPM 
behaves like a discrete TPM device, and can support third party applications, as well as 
Microsoft* specific functionality in the Vista* OS. 


Integrated TPM functionality requires a correctly configured system, including an 
appropriate mobile (G)MCH with Intel Management Engine firmware, |CH9M and SPI 
Flash. 
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Intel® |CH9 Family High-Level Component 
Differences 


Intel® 1CH9 Desktop/ Server Family 


Intel® Matrix 
SATA Storage Technology Intel® Viiy™ 
Component 


Nanne Ports RAID Platform 


AHCI 0/ 1/5/10 Driver Support 
Support 


(#) 


4 No 


Home 
ICH9 Digital | icH9D0 Yes Yes 
Office 


NOTES: 

1: Contact your local Intel Field Sales Representative for currently available |CH9 
components. 

2. Table above shows feature difference between ICH9 components. If a feature is not listed 
in the table it is considered a Base feature that is included in all components. 

3: SATA ports 2 and 3 are not functional in the base component. 

4. ICH9 Base provides hardware support for AHCI functionality when enabled by appropriate 


system configuration and software driver. 


Intel® 1CH9 Mobile Family 


Intel® Matrix 
Storage Technology 
Component Intel® Active 


Name RAID Management Technology 
0/ 1/5/10 
Support 


ICH9 Mobile 
Base ICH9M Yes 
ICH9 Mobile 
Enhanced ICH9M-E Yes 


NOTES: 

E, Contact your local Intel Field Sales Representative for currently available |CH9 
components. 

2. Table above shows feature difference between |CH9 mobile components. If a feature is not 





listed in the table it is considered a Base feature that is included in all mobile components. 
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Signal Description 


This chapter provides a detailed description of each signal. The signals are arranged in 
functional groups according to their associated interface. 


The “#” symbol at the end of the signal name indicates that the active, or asserted 
state occurs when the signal is at a low voltage level. When “#” is not present, the 
signal is asserted when at the high voltage level. 


The following notations are used to describe the signal type: 


I Input Pin 

Oo Output Pin 

oDO Open Drain Output Pin. 

1/OD Bi-directional Input/Open Drain Output Pin. 
1/0 Bi-directional Input / Output Pin. 


The “Type” for each signal is indicative of the functional operating mode of the signal. 
Unless otherwise noted in Section 3.2 or Section 3.3, a signal is considered to be in the 
functional operating mode after RTCRST# deasserts for signals in the RTC well, after 
RSMRST# deasserts for signals in the suspend well, after PWROK asserts for signals in 
the core well, and after LAN_RST# deasserts for signals in the LAN well. 
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Figure 2-1. Intel® 1CH9 Interface Signals Block Diagram (Desktop) 
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C/BE[3:0]}# 
DEVSEL# 
FRAME# 
IRDY# 
TRDY# 
STOP# 
PAR 
PERR# 

REQO# 

REQ1# / GPIO50 
REQ2# / GPIO52 
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SERIRQ 
PIRQ[D:A}# 
PIRQ[H:E]# / GPIO[5:2] 


USB[11:0]P; USB[11:0]N 
OCO#/GPIO59; OC 1#/GPI040 
OC2#/GPIO41; OC3#/GPI042 
OC4#/GPIO43; OC5#/GP1029 
OC6#/GPIO30; OC7#/GPIO31 
OC8#/GPIO44; OC9#/GPIO45 

OC10#/GP1046; OC 11#/GP1047 
USBRBIAS 
USBRBIAS# 


RTCX1 
RTCX2 








CLK14 

CLK48 

SATA_CLKP, SATA_CLKN 
DMI_CLKP, DMI_CLKN 





INTVRMEN 
SPKR 

SRTCRST#; RTCRST# 
TP[5:4] 

TP[7,2:1] 

TP[6,0] 

LAN100_SLP 





GPIO[49,34:32,28:27, 
20,18,16,13:12,8,0] 


PWM[2:0] 
TACHO/GPIO17; TACH1/GPIO1 
TACH2/GPI06; TACH3/GPIO7 
SST 

PECI 
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Signal Description 


LAN_RSTSYNG 

GLAN_CLK 

GLAN_TXp/PET6p; GLAN_TXn/PET6n 
GLAN_RXp/PER6p; GLAN_RXn/PER6n 
GLAN_COMPO 

GLAN_COMPI 


CL_CLKO ; CL_DATAO 
CL_VREFO 
CL_RSTO# 


PETp[5:1], PETn[5:1] 
PERp[5:1], PERn[5:1] 
GLAN_TXp/PET6p; GLAN_TXn/PET6n 
GLAN_RXp/PER6p; GLAN_RXn/PER6n 


SATA[5:0]TXP, SATA[5:0]TXN 
SATA[5:0JRXP, SATAI5:0]RXN 
SATARBIAS 
SATARBIAS# 
SATALED# 
SATACLKREQ# / GPIO35 
SATAOGP /GP1021 
SATAIGP /GPIO19 
SATA2GP /GPIO36 
SATASGP /GPI037 
SATA4GP 

SATASGP 
SCLOCK/GPIO22 
SLOAD/GP1038 
SDATAOUTO/GPIO39 
SDATAOUT1/GPIO48 
THRM# 

THRMTRIP# 
SYS_RESET# 
RSMRST# 
MCH_SYNG# 
SLP_S3# 

SLP_S4# 

SLP_S5# 

SLP_M# 
S4_STATE#/GPIO26 
PWROK 

CLPWROK 
PWRBTN# 

Rit 

WAKE# 
SUS_STAT#/ LPCPD# 
SUSCLK 

LAN_RST# 
VRMPWRGD 
PLTRST# 
CK_PWRGD 
STP_PCl#/ GPIO15 
STP_CPU# / GPIO25 
HDA_RST# 
HDA_SYNG 
HDA_BIT_CLK 
HDA_SDOUT 
HDA_SDIN[3:0] 


DMI[3:0]TXP, DMI[3:0]TXN 
DMI[3:0]RXP, DMI[3:0]JRXN 
DMI_ZCOMP 
DMI_IRCOMP 


FWH{[3:0] / LAD[3:0] 
FWH4 / LFRAME# 


LAD[3:0] / FWH[3:0] 
LFRAME# / FWH4 
LDRQO# 

LDRQ1#/ GP1O23 


SMBDATA 
SMBCLK 
SMBALERT#/ GPIO11 


INTRUDER# 

SMLINK[1:0] 
LINKALERT#/CLGP104/GPIO60 
MEM_LED/GPIO24; CLGPIO1/GPIO10 
CLGPIOZ/GPIO14; 

CLGPIOS/GPIO57 
GLGPIO6/SPI_CS1#/GPIO58; 





LAN 
Connect 
Interface 
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GLAN_CLK 
LAN_RXD[2:0] 
LAN_TXD[2:0] 
LAN_RSTSYNG 





Signal Description 


Figure 2-2. 


AD[31:0] 
C/BE[3:0}# 
DEVSEL# 
FRAME# 

IRDY# 

TRDY# 

STOP# 

PAR 

PERR# 

REQO# 

REQ1# / GPIO50 
REQ2# / GPIO52 
REQS# / GPIO54 
GNTOo# 
GNT1#/GPIO51 
GNT2# / GPIO53 
GNT3# / GPIO55 
SERR# 

PME# 

PCICLK 
PCIRST# 
PLOCK# 
A20M# 
FERR# 
IGNNE# 
INITH 
INTR 

NMI 
SMI# 
STPCLK# 
RCIN# 
A20GATE 
CPUPWRGD 
DPSLP# 


SPI_CSO# 
SPI_CS1#/GPIO58/CLGPIO6 
SPI_MISO 

SPI_MOSI 

SPI_CLK 


SERIRQ 
PIRQ(D:A]# 
PIRQ[H:E]# / GPIO[5:2] 


USB[11:0]P; USB[11:0]N 
OCO#/GPIO59; OC1#/GP1040 
OC2#/GPIO41; OC3#/GP1O42 
OC4#/GPIO43; OC5#/GP1029 
OC6#H/GPIO30; OC7#/GPIO31 
OC8#/GPIO44; OC9#/GPIO45 

OC10#/GPI046; OC11#/GPIO47 

USBRBIAS 
USBRBIAS# 


RTCX1 
RTCX2 


CLK14 

CLK48 

SATA_CLKP, SATA_CLKN 
DMI_CLKP, DMI_CLKN 


INTVRMEN 
SPKR 

RTCRST#; SRTCRST# 
TP[12:8,3] 
LAN100_SLP 


GPIO[56,49,28:27,20,18:17, 
13, 8:6,1] 


GLAN_CLK 
LAN_RXD[2:0] 

LAN_TXD[2:0] 

LAN_RSTSYNG 
LAN_PHY_PWR_CTRL/GPIO12 
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Intel® 1CH9 Interface Signals Block Diagram (Mobile) 








PCI 
Interface 


Processor 
Interface 


lH 











Interrupt 
Interface 














.____ GLAN_CLK 

[> GLAN_TXp/PET6p; GLAN_TXn/PET6n 

[__, GLAN_RXp/PER6p; GLAN_RXn/PER6n 
GLAN_COMPO, 

[_ GLAN_COMPI 


GbE 
Controller 





+—— CL_CLK[1:0] ; CL_DATA[1:0] 
t—P CL_VREF[I:0] 
t—p CL_RST[1:0}# 


Controller 
Link 


{tt ttt 











> PETp{S:1], PETn{5:1] 

PCI —— PER [5:1], PERN[5:1] 
Express* | —> GLAN_TXp/PET6p; GLAN_TXn/PET6n 
Interface | GLAN_RXp/PER6p; GLAN_RXn/PER6n 














p> SATA[5:4,1:0]TXP, SATA[5:4,1:0]TXN 
SATAIS:4,1:0]RXP, SATA[5:4,1:0]RXN 
SATARBIAS 

SATARBIAS# 

SATALED# 

SATACLKREQ# / GPIO35 

SATAOGP /GP1O21; SATA1GP /GPIO19 
SATA4GP /GPIO36; SATASGP /GPIO37 
SCLOCK/GPIO022 

SLOAD/GPIO38 

SDATAOUTO/GPIO39 
SDATAOUT1/GPIO48 
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Interface 


CTT A 


TTY 








Ht 











THRM# 
THRMTRIP# 
SYS_RESET# 
RSMRST# 
MCH_SYNC# 
SLP_S3# 

SLP_S4# 

SLP_SS# 

SLP_M# 
S4_STATE#/GPIO26 
PWROK 

CLPWROK 
PWRBTN# 

Rl# 

WAKE# 
SUS_STAT#/LPCPD 
SUSCLK 
LAN_RST# 
VRMPWRGD 
PLTRST# 
CK_PWRGD 
PMSYNC#/GPIO0 
CLKRUN# 
STP_PCl# 
STP_CPU# 
BATLOW# 
DPRSLPVR/GPIO16 
DPRSTP# 
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HLH 























UT TPT 


WITS TTTTT 











* > HDA_RST# 
Intel > HDA SYNC 
High > HDA BIT_CLK 


Definition HDA_SDIN[3:0] 
Audio |__» HDA_DOCK_EN/GPIO33 


Lo DA_DOCK_RST#H/GPIOS4 








Ht 





[> bDmIl[3:0]TXP, DMI[3:0]TXN 
DMI[3:0]RXP, DMI[3:0]RXN 
DMI_ZCOMP 
|__» DMI_IRCOMP 


Direct 
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[tt 

















Firmware t——> FWH{s:0] / LAD[3:0] 
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2.1 Direct Media I nterface (DMI) to Host Controller 


Table 2-1. Direct Media I nterface Signals 
[Teme [ree eseroon 
Basta [© [monomers newman more 
Bases | 1 [eeerneaemernsomonmurnemnerire 
iia ["6 ements noe reanmors 
ae [1 owewomte inn omoemitmrerars 
za [ © ements now ravan mor? 


DMI 2RXP, . - : 7 - 

DMI 2RXN <a Direct Media I nterface Differential Receive Pair 2 

DMI 3TXP, 7 P : : - : 

DMI 3TXN ZZ Direct Media I nterface Differential Transmit Pair 3 

DMI 3RXP, : : : 7 7 ‘ 

DMI 3RXN a Direct Media I nterface Differential Receive Pair 3 
Impedance Compensation Input: Determines DMI input 
impedance. 

DMI IRCOMP Impedance/ Current Compensation Output: Determines DMI 

= output impedance and bias current. 
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2.2 PCI Express* 


Table 2-2. PCI Express* Signals 


PETp1, PETn1 PCI Express* Differential Transmit Pair 1 
PERp1, PERn1 PCI Express Differential Receive Pair 1 


PETp2, PETn2 PCI Express Differential Transmit Pair 2 
PERp2, PERn2 PCI Express Differential Receive Pair 2 
PETp3, PETn3 PCI Express Differential Transmit Pair 3 


PERp3, PERn3 PCI Express Differential Receive Pair 3 
PETp4, PETn4 PCI Express Differential Transmit Pair 4 


PERp4, PERn4 PCI Express Differential Receive Pair 4 
PETp5, PETn5 PCI Express Differential Transmit Pair 5 
PERp5, PERn5 PCI Express Differential Receive Pair 5 


PCI Express Differential Transmit Pair 6: The differential pair 
Pee ae will function as the Gigabit LAN Connect Interface transmit pair 
= when the integrated Gigabit LAN controller is enabled. 


PCI Express Differential Receive Pair 6: The differential pair 
will function as the Gigabit LAN Connect Interface receive pair 
when the integrated Gigabit LAN controller is enabled. 


PERp6/GLAN_RXp, 
PERn6/GLAN_RXn 





2.3 LAN Connect Interface 


Table 2-3. LAN Connect I nterface Signals 


a 


Gigabit LAN Input Clock: Clock driven by the Platform LAN Connect 
device. The frequency will vary depending on link speed. 
GLAN_CLK 
NOTE: The clock is shared between the LAN Connect Interface and the 
Gigabit LAN Connect Interface. 





Received Data: The Platform LAN Connect device uses these signals 
LAN_RXD[2:0] to transfer data and control information to the integrated LAN 
controller. These signals have integrated weak pull-up resistors. 
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Table 2-3. LAN Connect Interface Signals 


Transmit Data: The integrated LAN controller uses these signals to 
transfer data and control information to the Platform LAN Connect 
component. 


LAN Reset/ Sync: This is the reset/sync signal from the LAN Connect 
Interface to the physical device. The Platform LAN Connect device’s 
LAN_RSTSYNC Reset and Sync signals are multiplexed onto this pin. 


LAN_TXD[2:0] 


NOTE: The signal is shared between LAN Connect Interface and 
Gigabit LAN Connect Interface. 


LAN PHY Power Control: This signal may optionally be connected to a switch 
to turn 3.3V PHY power off when LAN is disabled for additional power savings. 
This capability is configured in the NVM. When using an 82567 PHY solution, the 
LAN_PHY_PWR_CTRL signal should be connected to the PHY’s LAN_DISABLE_N 
pin for a hardware based LAN disable mechanism. 


LAN_PHY_ PW 
R_CTRL (Mobile 
Only) / GPIO12 


Signal can instead be used as GPIO12. 





2.4 Gigabit LAN Connect I nterface 


Table 2-4. Gigabit LAN Connect Interface Signals 


a nn... Se 


Gigabit LAN Input Clock: Clock driven by the Platform LAN 
Connect device. The frequency will vary depending on link 
GLAN_CLK apeee: 
NOTE: The clock is shared between the LAN Connect Interface 
and the Gigabit LAN Connect Interface. 
GLAN_TXp/PET6p; Gigabit LAN Differential Transmit Pair. Can be instead used 
GLAN_TXn/PET6n as PCI Express port 6 differential transmit pair. 


GLAN_RXp/PER6p; Gigabit LAN Differential Receive Pair. Can be instead used 


GLAN_RXn/PER6n as PCI Express port 6 differential receive pair. 
Impedance Compensation Output pad: Determines Gigabit 
GLAN_COMEO | 0 | LAN Connect Interface output impedance and bias current. 
Impedance Compensation I nput pad: Determines Gigabit 
Shanon ze LAN Connect Interface input impedance. 


LAN Reset/ Sync: This is the reset/sync signal from the Gigabit 
LAN interface to the physical device. The Platform LAN Connect 
LAN_RSTSYNC device’s Reset and Sync signals are multiplexed onto this pin. 
NOTE: The signal is shared between LAN Connect Interface and 
Gigabit LAN Connect Interface. 
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2.5 Firmware Hub Interface 


Table 2-5. Firmware Hub Interface Signals 
Firmware Hub Signals. These signals are multiplexed with the LPC 
address signals. 


FWH[3:0] / 


INIT3_3V# 
(Desktop 
Only) 


Initialization 3.3 V: This is the identical 3.3 V copy of INIT# intended 
for Firmware Hub. 





Firmware Hub Signals. This signal is multiplexed with the LPC 
LFRAME# LFRAME# signal. 
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2.6 PCI Interface 


Table 2-6. PCI Interface Signals (Sheet 1 of 3) 


Description 


PCI Address/ Data: AD[31:0] is a multiplexed address and data 
bus. During the first clock of a transaction, AD[31:0] contain a 
physical address (32 bits). During subsequent clocks, AD[31:0] 
contain data. The Intel® ICH9 will drive all Os on AD[31:0] during 
the address phase of all PCI Special Cycles. 


Bus Command and Byte Enables: The command and byte enable 
signals are multiplexed on the same PCI pins. During the address 
phase of a transaction, 

C/BE[3:0]# define the bus command. During the data phase C/ 
BE[3:0]# define the Byte Enables. 


C/ BE[3:0]# Command Type 
0000b Interrupt Acknowledge 
0001b Special Cycle 
0010b 1/O Read 
C/ BE[3:0]# 1/0 0011b 1/O Write 
0110b Memory Read 
0111b Memory Write 
1010b Configuration Read 
1011b Configuration Write 
1100b Memory Read Multiple 
1110b Memory Read Line 
1111b Memory Write and Invalidate 
All command encodings not shown are reserved. The |CH9 does not 


decode reserved values, and therefore will not respond if a PCI 
master generates a cycle using one of the reserved values. 


Device Select: The |CH9 asserts DEVSEL# to claim a PCI 
transaction. As an output, the ICH9 asserts DEVSEL# when a PCI 
master peripheral attempts an access to an internal |CH9 address 
or an address destined for DMI (main memory or graphics). As an 
input, DEVSEL# indicates the response to an |CH9-initiated 
transaction on the PCI bus. DEVSEL# is tri-stated from the leading 
edge of PLTRST#. DEVSEL# remains tri-stated by the ICH9 until 
driven by a target device. 


DEVSEL# 


Cycle Frame: The current initiator drives FRAME# to indicate the 
beginning and duration of a PCI transaction. While the initiator 
asserts FRAME#, data transfers continue. When the initiator 
negates FRAME#, the transaction is in the final data phase. 
FRAME# is an input to the |CH9 when the ICH9 is the target, and 
FRAME# is an output from the ICH9 when the 1CH9 is the initiator. 
FRAME# remains tri-stated by the ICH9 until driven by an initiator. 
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REQO# 
REQ1#/ GPIO50 
REQ2#/ GPIO52 
REQ3#/ GPIO54 


Initiator Ready: |RDY# indicates the ICH9's ability, as an initiator, 
to complete the current data phase of the transaction. It is used in 
conjunction with TRDY#. A data phase is completed on any clock 
both IRDY# and TRDY# are sampled asserted. During a write, 
IRDY# indicates the ICH9 has valid data present on AD[31:0]. 
During a read, it indicates the |CH9 is prepared to latch data. 
IRDY# is an input to the ICH9 when the |CH9 is the target and an 
output from the ICH9 when the ICH9 is an initiator. |RDY# remains 
tri-stated by the |CH9 until driven by an initiator. 


Target Ready: TRDY# indicates the |CH9's ability as a target to 
complete the current data phase of the transaction. TRDY# is used 
in conjunction with IRDY#. A data phase is completed when both 
TRDY# and IRDY# are sampled asserted. During a read, TRDY# 
indicates that the |CH9, as a target, has placed valid data on 
AD[31:0]. During a write, TRDY# indicates the ICH9, as a target is 
prepared to latch data. TRDY# is an input to the I|CH9 when the 
ICH9 is the initiator and an output from the ICH9 when the |CH9 is 
a target. TRDY# is tri-stated from the leading edge of PLTRST#. 
TRDY# remains tri-stated by the ICH9 until driven by a target. 


Stop: STOP# indicates that the ICH9, as a target, is requesting the 
initiator to stop the current transaction. STOP# causes the ICH9, as 
an initiator, to stop the current transaction. STOP# is an output 
when the ICH9 is a target and an input when the ICH9 is an 
initiator. 

Calculated/ Checked Parity: PAR uses “even” parity calculated on 
36 bits, AD[31:0] plus C/BE[3:0]#. “Even” parity means that the 
ICH9 counts the number of ones within the 36 bits plus PAR and the 
sum is always even. The ICH9 always calculates PAR on 36 bits 
regardless of the valid byte enables. The |CH9 generates PAR for 
address and data phases and only ensures PAR to be valid one PCI 
clock after the corresponding address or data phase. The ICH9 
drives and tri-states PAR identically to the AD[31:0] lines except 
that the ICH9 delays PAR by exactly one PCI clock. PAR is an output 
during the address phase (delayed one clock) for all ICH9 initiated 
transactions. PAR is an output during the data phase (delayed one 
clock) when the ICH9 is the initiator of a PCI write transaction, and 
when it is the target of a read transaction. |CH9 checks parity when 
it is the target of a PCI write transaction. If a parity error is 
detected, the ICH9 will set the appropriate internal status bits, and 
has the option to generate an NMI# or SMI#. 


Parity Error: An external PCI device drives PERR# when it receives 
data that has a parity error. The |CH9 drives PERR# when it detects 
a parity error. The |CH9 can either generate an NMI# or SMI# upon 
detecting a parity error (either detected internally or reported via 
the PERR# signal). 


PCI Requests: The |CH9 supports up to 4 masters on the PCI bus. 
REQ[3:1]# pins can instead be used as GPIO. 
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Table 2-6. PCI Interface Signals (Sheet 3 of 3) 


oe rere ee 


GNTO# 
GNT1#/ GPIO51 
GNT2#/ GPIO53 
GNT3#/ GPIO55 


PCICLK 
PCI RST# 


PLOCK# 


PCI Grants: The |CH9 supports up to 4 masters on the PCI bus. 
GNT[3:1]# pins can instead be used as GPIO. 


Pull-up resistors are not required on these signals. If pull-ups are 
used, they should be tied to the Vcc3_3 power rail. 


NOTE: GNT[3:0]# are sampled as a functional strap. See 
Section 2.24.1 for details. 


PCI Clock: This is a 33 MHz clock. PCICLK provides timing for all 
transactions on the PCI Bus. 


Note: (Mobile Only) This clock does not stop based on STP_PCI# 
signal. PCI Clock only stops based on SLP_S3#. 


PCI Reset: This is the Secondary PCI Bus reset signal. Itis a 
logical OR of the primary interface PLTRST# signal and the state of 
the Secondary Bus Reset bit of the Bridge Control register 
(D30:FO:3Eh, bit 6). 


PCI Lock: This signal indicates an exclusive bus operation and may 

require multiple transactions to complete. |CH9 asserts PLOCK# 

when it performs non-exclusive transactions on the PCI bus. 

PLOCK# is ignored when PCI masters are granted the bus in 

desktop configurations. 

Note: In mobile configuration, devices on the PCI bus (other than 
the ICH9) are not permitted to assert the PLOCK# signal. 


System Error: SERR# can be pulsed active by any PCI device that 
detects a system error condition. Upon sampling SERR# active, the 
ICH9 has the ability to generate an NMI, SMI#, or interrupt. 


PCI Power Management Event: PCI peripherals drive PME# to 
wake the system from low-power states S1-S5. PME# assertion can 
also be enabled to generate an SCI from the SO state. In some 
cases the ICH9 may drive PME# active due to an internal wake 
event. The ICH9 will not drive PME# high, but it will be pulled up to 
VccSus3_3 by an internal pull-up resistor. 





2.7 Serial ATA Interface 


Table 2-7. Serial ATA Interface Signals (Sheet 1 of 4) 


SATAOTXP 
SATAOTXN 


SATAORXP 
SATAORXN 


SATA1TXP 
SATA1TXN 
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Serial ATA 0 Differential Transmit Pairs: These are outbound 
high-speed differential signals to Port 0. 

In compatible mode, SATA Port 0 is the primary master of SATA 
Controller 1. 


Serial ATA 0 Differential Receive Pair: These are inbound high- 
speed differential signals from Port 0. 

In compatible mode, SATA Port 0 is the primary master of SATA 
Controller 1. 

Serial ATA 1 Differential Transmit Pair: These are outbound 
high-speed differential signals to Port 1. 


In compatible mode, SATA Port 1 is the secondary master of SATA 
Controller 1. 
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Table 2-7. Serial ATA Interface Signals (Sheet 2 of 4) 


EE ere are 


Serial ATA 1 Differential Receive Pair: These are inbound high- 
speed differential signals from Port 1. 


In compatible mode, SATA Port 1 is the secondary master of SATA 
Controller 1 


SATA1LRXP 
SATA1LRXN 


Serial ATA 2 Differential Transmit Pair: These are outbound 
high-speed differential signals to Port 2. 


In compatible mode, SATA Port 2 is the primary slave of SATA 
Controller 1. 


SATA2TXP 
SATA2TXN 


(ICH9R, |CH9DH, 


ICH9DO Only) NOTE: This port is not functional in the Desktop ICH9 Base 


component. 


Serial ATA 2 Differential Receive Pair: These are inbound high- 
speed differential signals from Port 2. 


In compatible mode, SATA Port 2 is the primary slave of SATA 

Controller 1. 

NOTE: This port is not functional in the Desktop ICH9 Base 
component. 


SATA2RXP 
SATA2RXN 


(ICH9OR, |CH9DH, 
ICH9DO Only) 


Serial ATA 3 Differential Transmit Pair: These are outbound 

high-speed differential signals to Port 3. 

In compatible mode, SATA Port 3 is the secondary slave of SATA 

Controller 1. 

NOTE: This port is not functional in the Desktop ICH9 Base 
component. 


Serial ATA 3 Differential Receive Pair: These are inbound high- 
SATA3RXP speed differential signals from Port 3. 


SATA3TXP 
SATA3TXN 


(ICHOR, |CH9DH, 
ICH9DO Only) 


SATA3RXN 
(ICHOR, |CH9DH, 
ICH9DO Only) 


In compatible mode, SATA Port 3 is the secondary slave of SATA 

Controller 1. 

NOTE: This port is not functional in the Desktop ICH9 Base 
component. 


Serial ATA 4 Differential Transmit Pair: These are outbound 
high-speed differential signals to Port 4. 


In compatible mode, SATA Port 4 is the primary master of SATA 
Controller 2. 


SATA4TXP 
SATA4TXN 


Serial ATA 4 Differential Receive Pair: These are inbound high- 
speed differential signals from Port 4. 

In compatible mode, SATA Port 4 is the primary master of SATA 
Controller 2 


SATA4RXP 
SATA4RXN 


Serial ATA 5 Differential Transmit Pair: These are outbound 
high-speed differential signals to Port 5. 

In compatible mode, SATA Port 5 is the secondary master of SATA 
Controller 2. 


SATASTXP 
SATA5TXN 


Serial ATA 5 Differential Receive Pair: These are inbound high- 
speed differential signals from Port 5. 


In compatible mode, SATA Port 5 is the secondary master of SATA 
Controller 2. 


SATA5RXP 
SATA5RXN 


Serial ATA Resistor Bias: This is an analog connection point for 
an external resistor to ground. 


SATARBI AS 
SATARBI AS# 


Serial ATA Resistor Bias Complement: This is an analog 
connection point for an external resistor to ground. 
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Table 2-7. Serial ATA Interface Signals (Sheet 3 of 4) 


ee re ee 


Serial ATA 0 General Purpose: This is an input pin which can be 
configured as an interlock switch corresponding to SATA Port 0. 
When used as an interlock switch status indication, this signal 
should be drive to ‘0’ to indicate that the switch is closed and to ‘1’ 
to indicate that the switch is open. 

If interlock switches are not required, this pin can be configured as 
GPIO21. 


Serial ATA 1 General Purpose: Same function as SATAOGP, 
except for SATA Port 1. 

If interlock switches are not required, this pin can be configured as 
GPIO19. 

Serial ATA 2 General Purpose: Same function as SATAOGP, 
except for SATA Port 2. 


If interlock switches are not required, this pin can be configured as 
GPIO36. 


SATAOGP / 
GPIO21 


SATA1GP / 
GPIO19 


SATA2GP / 
GP1036 
(ICHOR, |CH9DH, 
ICH9DO Only) 


NOTE: This signal can also be used as GPIO36 for Desktop 
components. This signal can only be used as GPI O36 in the 
Desktop ICH9 Base component. 


Serial ATA 3 General Purpose: Same function as SATAOGP, 
except for SATA Port 3. 
SATA3GP / If interlock switches are not required, this pin can be configured as 
GPI037 GPI037. 
(ICH9R, |CH9DH, 
ICH9DO Only) NOTE: This signal can also be used as GPIO37 for Desktop 


components. This signal can only be used as GPIO37 in the 
Desktop ICH9 Base component. 


Serial ATA 4 General Purpose: Same function as SATAOGP, 
except for SATA Port 4. 


Note: This signal can also be used as GPIO36 for Mobile 
components. 


SATAGGP / 
GP1036 (Mobile 
Only) 


Serial ATA 5 General Purpose: Same function as SATAOGP, 
except for SATA Port 5. 

Note: This signal can also be used as GPIO37 for Mobile 
components. 


SATASGP / 
GP1037 (Mobile 
Only) 


Serial ATA LED: This signal is an open-drain output pin driven 
during SATA command activity. It is to be connected to external 
circuitry that can provide the current to drive a platform LED. When 
SATALED# active, the LED is on. When tri-stated, the LED is off. An external 
pull-up resistor to Vcc3_3 is required. 
NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for details. 


Serial ATA Clock Request: This signal is an open-drain output pin 
when configured as SATACLKREQ#. It is used to connect to the 
system clock chip. When active, request for SATA Clock running is 
asserted. When tri-stated, it tells the Clock Chip that SATA Clock 
can be stopped. An external pull-up resistor is required. 


SATACLKREQ#/ 
GPIO35 
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Table 2-7. Serial ATA Interface Signals (Sheet 4 of 4) 


SGPIO Reference Clock: The SATA controller uses rising edges of 
this clock to transmit serial data, and the target uses the falling 
edge of this clock to latch data. 


If SGPIO interface is not used, this signal can be used as a GPIO. 


SGPIO Load: The controller drives a ‘1’ at the rising edge of 
SCLOCK to indicate either the start or end of a bit stream. A 4-bit 


SCLOCK/GPIO022 


vendor specific pattern will be transmitted right after the signal 
assertion. 
If SGPIO interface is not used, this signal can be used as a GPIO. 


SLOAD/GPI038 


SDATAOUTO/ 
GPIO39 


SDATAOUT1/ 
GPIO48 


SGPIO Dataout: Driven by the controller to indicate the drive 
status in the following sequence: drive 0, 1, 2, 3, 4, 5, 0, 1, 2... 


If SGPIO interface is not used, the signals can be used as GPIO. 





2.8 LPC Interface 


Table 2-8. LPC Interface Signals 
Type Description 


LAD[3:0] / 1/0 LPC Multiplexed Command, Address, Data: For LAD[3:0], internal 
FWH[3:0] pull-ups are provided. 


EERAMES LPC Frame: LFRAME# indicates the start of an LPC cycle, or an abort. 


FWH4 


LDRQO#, 


LDRQ1# / 
GPIO23 


request DMA or bus master access. These signals are typically connected 
to an external Super I/O device. An internal pull-up resistor is provided on 
these signals. 


LDRQ1# may optionally be used as GPIO. 





a LPC Serial DMA/ Master Request Inputs: LDRQ[1:0]# are used to 
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2.9 Interrupt Interface 


Table 2-9. Interrupt Signals 

[name [ive [everson 
1/OD Serial Interrupt Request: This pin implements the serial interrupt 
protocol. 


PCI Interrupt Requests: In non-APIC mode the PIRQx# signals can 
be routed to interrupts 3, 4, 5, 6, 7, 9, 10, 11, 12, 14 of 15 as 
described in Section 5.8.6. Each PIRQx# line has a separate Route 
Control register. 

PIRQID:A]# | 1/OD a 


In APIC mode, these signals are connected to the internal I/O APIC in 
the following fashion: PIRQA# is connected to |RQ16, PIRQB# to 
IRQ17, PIRQC# to IRQ18, and PIRQD# to IRQ19. This frees the 
legacy interrupts. 


PCI Interrupt Requests: In non-APIC mode the PIRQx# signals can 
be routed to interrupts 3, 4, 5, 6, 7, 9, 10, 11, 12, 14 or 15 as 
described in Section 5.8.6. Each PIRQx# line has a separate Route 
Control register. 
PIRQ[H:E]# 
SIME) 1/OD | In APIC mode, these signals are connected to the internal |/O APIC in 


Stel the following fashion: PIRQE# is connected to IRQ20, PIRQF# to 
IRQ21, PIRQG# to IRQ22, and PIRQH# to IRQ23. This frees the 
legacy interrupts. If not needed for interrupts, these signals can be 
used as GPIO. 
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2.10 USB Interface 


Table 2-10. USB Interface Signals 


USBPOP, 
USBPON, 
USBP1P, 
USBP1N 


USBP2P, 
USBP2N, 
USBP3P, 
USBP3N 


USBP4P, 
USBP4N, 
USBP5P, 
USBP5N 


USBP6P, 
USBP6N, 
USBP7P, 
USBP7N 


USBPSP, 
USBPS8N, 
USBP9P, 
USBPON 


Universal Serial Bus Port [1:0] Differential: These differential 
pairs are used to transmit Data/Address/Command signals for ports 
0 and 1. These ports can be routed to UHCI controller #1 or the 
EHCI controller #1. 


NOTE: No external resistors are required on these signals. The 
Intel® ICH9 integrates 15 kQ pull-downs and provides an 
output driver impedance of 45 Q which requires no external 
series resistor. 


Universal Serial Bus Port [3:2] Differential: These differential 
pairs are used to transmit data/address/command signals for ports 2 
and 3. These ports can be routed to UHCI controller #2 or the EHCI 
controller #1. 


NOTE: No external resistors are required on these signals. The |CH9 
integrates 15 kQ pull-downs and provides an output driver 
impedance of 45 @ which requires no external series resistor. 


Universal Serial Bus Port [5:4] Differential: These differential 
pairs are used to transmit Data/Address/Command signals for ports 
4 and 5. These ports can be routed to UHCI controller #3 or the 
EHCI controller #1. 


NOTE: No external resistors are required on these signals. The |CH9 
integrates 15 kQ pull-downs and provides an output driver 
impedance of 45 @ which requires no external series resistor. 


Universal Serial Bus Port [7:6] Differential: These differential 
pairs are used to transmit Data/Address/Command signals for ports 
6 and 7. These ports can be routed to UHCI controller #4 or the 
EHCI controller #2. 


NOTE: No external resistors are required on these signals. The |CH9 
integrates 15 kQ pull-downs and provides an output driver 
impedance of 45 @ which requires no external series resistor. 


Universal Serial Bus Port [9:8] Differential: These differential 
pairs are used to transmit Data/Address/Command signals for ports 
8 and 9. These ports can be routed to UHCI controller #5 or the 
EHCI controller #2. 


NOTE: No external resistors are required on these signals. The |CH9 
integrates 15 kQ pull-downs and provides an output driver 
impedance of 45 @ which requires no external series resistor. 
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Table 2-10. USB Interface Signals 


Universal Serial Bus Port [11:10] Differential: These 
differential pairs are used to transmit Data/Address/Command 
signals for ports 10 and 11. These ports can be routed to UHCI 
USBP10P, controller #6 or the EHCI controller #2. These ports can be 
1/0 


USBPI1ON, optionally routed to EHCI Controller #1 when bit 0 RCBA 35FOh is 
USBP11P, set. 
USBP11N 
NOTE: No external resistors are required on these signals. The |CH9 
integrates 15 kQ pull-downs and provides an output driver 
impedance of 45 Q which requires no external series resistor. 


USB Resistor Bias: Analog connection point for an external 
resistor. Used to set transmit currents and internal load resistors. 


USBRBIAS 
USBRBI AS# 


USB Resistor Bias Complement: Analog connection point for an 
external resistor. Used to set transmit currents and internal load 
resistors. 


OCO# / GPIO59 Overcurrent I ndicators: These signals set corresponding bits in 
OC1# / GPIO40 the USB controllers to indicate that an overcurrent condition has 
OC2# / GPIO41 cigelaes 

Oc3# / GPIO42 OC[11:0]# may optionally be used as GPIOs. 

sea pe NOTE: OC[11:0]# are not 5 V tolerant. 

OC6# / GPIO30 

OC7# / GPIO31 

OC8# / GPIO044 

OC9# / GPIO45 

OC10# / GPIO46 

OC11# / GPIO47 





70 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


1] ® 
Signal Description [ n tel 


2.11 Power Management Interface 


Table 2-11. Power a Interface Signals (Sheet 1 of 3) 


Platform Reset: The Intel® ICH9 asserts PLTRST# to reset devices 
on the platform (e.g., SIO, FWH, LAN, (G)MCH, TPM, etc.). The |CH9 
asserts PLTRST# during power-up and when S/W initiates a hard reset 
sequence through the Reset Control register (I/O Register CF9h). The 
ICH9 drives PLTRST# inactive a minimum of 1 ms after both PWROK 
and VRMPWRGD are driven high. The |CH9 drives PLTRST# active a 
minimum of 1 ms when initiated through the Reset Control register 
(1/O Register CF9h). 


PLTRST# 


NOTE: PLTRST# is in the VccSus3_3 well. 


Thermal Alarm: Active low signal generated by external hardware to 
| TAR | 
generate an SMI# or SCI. 


Thermal Trip: When low, this signal indicates that a thermal trip from 
the processor occurred, and the |CH9 will immediately transition to a 
S5 state. The ICH9 will not wait for the processor stop grant cycle 
since the processor has overheated. 


S3 Sleep Control: SLP_S3# is for power plane control. This signal 
SLP_S3# shuts off power to all non-critical systems when in S3 (Suspend To 
RAM), S4 (Suspend to Disk), or S5 (Soft Off) states. 


S4 Sleep Control: SLP_S4# is for power plane control. This signal 
shuts power to all non-critical systems when in the S4 (Suspend to 
Disk) or S5 (Soft Off) state. 


THRMTRI P# 


NOTE: This pin must be used to control the DRAM power in order to 
use the ICH9’s DRAM power-cycling feature. Refer to 
Chapter 5.13.11.2 for details. 

NOTE: In a system with Intel AMT or ASF support, this signal should 
be used to control the DRAM power. In M1 state (where the 
host platform is in S3-S5 states and the manageability sub- 
system is running) the signal is forced high along with SLP_M# 
in order to properly maintain power to the DIMM used for 
manageability sub-system. 


S5 Sleep Control: SLP_S5# is for power plane control. This signal is 
SLP_S5# used to shut power off to all non-critical systems when in the S5 (Soft 
Off) states. 


Manageability Sleep State Control: This signal is used to control 

SLP_M# power planes to the Intel® AMT or ASF sub-system. If no Intel AMT or 
ASF Management Engine firmware is present, SLP_M# will have the 
same timings as SLP_S3#. 


SLP_S4# 


S4 State I ndication: This signal asserts low when the host platform 
is in S4 or S5 state. In platforms where the management engine is 
forcing the SLP_S4# high along with SLP_M#, this signal can be used 
by other devices on the board to know when the host platform is 
below the S3 state. 


S4_STATE# / 
“GP1O26 
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Table 2-11. Power Management Interface Signals (Sheet 2 of 3) 


a 


Power OK: When asserted, PWROK is an indication to the |CH9 that all 
power rails have been stable for 99 ms and that PCICLK has been 
stable for 1 ms. PWROK can be driven asynchronously. When PWROK 
is negated, the |CH9 asserts PLTRST#. 

NOTE: 

1. PWROK must deassert for a minimum of three RTC clock 
periods in order for the ICH9 to fully reset the power and 
properly generate the PLTRST# output. 

: PWROK must not glitch, even if RSMRST# is low. 

Controller Link Power OK: When asserted, indicates that power to 

the Controller Link subsystem (MCH, ICH, etc.) is stable and tells the 

ICH to deassert CL_RST# to the MCH. 

CLPWROK 

NOTES: 

Ls CLPWROK must not assert before RSMRST# deasserts. 

2. CLPWROK must not assert after PWROK asserts. 


Power Button: The Power Button will cause SMI # or SCI to indicate a 
system request to go to a sleep state. If the system is already in a 
sleep state, this signal will cause a wake event. If PWRBTN# is pressed 

PWRBTN# for more than 4 seconds, this will cause an unconditional transition 
(power button override) to the S5 state. Override will occur even if the 
system is in the S$1-S4 states. This signal has an internal pull-up 
resistor and has an internal 16 ms de-bounce on the input. 


Ring Indicate: This signal is an input from a modem. It can be 
enabled as a wake event, and this is preserved across power failures. 


System Reset: This pin forces an internal reset after being 
SYS RESET# debounced. The ICH9 will reset immediately if the SMBus is idle; 
= otherwise, it will wait up to 25 ms + 2 ms for the SMBus to idle before 

forcing a reset on the system. 
Resume Well Reset: This signal is used for resetting the resume 

RSMRST# power plane logic. This signal must be asserted for at least 10 ms after 
the suspend power wells are valid. When deasserted, this signal is an 
indication that the suspend power wells are stable. 


LAN Reset: When asserted, the internal LAN controller is in reset. 
This signal must be asserted until the LAN power wells (VccLAN3_ 3 
and VccLAN1_05) and VccCL3_3 power well are valid. When 
deasserted, this signal is an indication that the LAN power wells are 
stable. 
NOTES: 

LAN_RST# : LAN_RST# must not deassert before RSMRST# deasserts 

; LAN_RST# must not deassert after PWROK asserts. 

; LAN_RST# must not deassert until lms after the LAN power 
wells (VccLAN3_3 and VccLAN1_05 and VccCL3_3 power well 
are valid. 

: If integrated LAN is not used LAN_RST# can be tied to Vss. 

: LAN_RST# must assert a minimum of 20 ns before LAN power 
rails become inactive. 


PCI Express* Wake Event: Sideband wake signal on PCI Express 
asserted by components requesting wake up. 


MCH SYNC; This input is internally ANDed with the PWROK input. 
MCH_SYNC# 
= Connect to the |CH_SYNC# output of (G)MCH. 
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SUS_STAT# / 
LPCPD# 


SUSCLK 


VRMPWRGD 
CK_PWRGD 


PMSYNC# 
(Mobile Only) / 
GPIOO 


CLKRUN# 
(Mobile Only)/ 
GPIO32 
(Desktop Only) 


STP_PCI# / 
GPIO15 
(Desktop Only) 


STP_CPU# / 
GPIO25 
(Desktop Only) 


BATLOW# 
(Mobile Only) / 
TPO 
(Desktop Only) 


DPRSLPVR 
(Mobile Only) / 
GPIO16 


DPRSTP# 
(Mobile Only) / 
TP1 
(Desktop Only) 


Suspend Status: This signal is asserted by the |CH9 to indicate that 
the system will be entering a low power state soon. This can be 
monitored by devices with memory that need to switch from normal 
refresh to suspend refresh mode. It can also be used by other 
peripherals as an indication that they should isolate their outputs that 
may be going to powered-off planes. This signal is called LPCPD# on 
the LPC interface. 


Suspend Clock: This clock is an output of the RTC generator circuit to 
use by other chips for refresh clock. 


VRM Power Good: This signal should be connected to the processor’s 
VRM Power Good signifying the VRM is stable. This signal is internally 
ANDed with the PWROK input. 


This signal is in the suspend well. 


Clock Generator Power Good: indicates to the clock generator 
when the main power well is valid. This signal is asserted high when 
both SLP_S3# and VRMPWRGD are high. 


Power Management Sync: When asserted, it signals the MCH to 
deassert CPUSLP# pin when exiting out of C5 or C6. 


Signal may also be used as a GPIO. 


PCI Clock Run: Used to support PCI CLKRUN protocol. Connects to 
peripherals that need to request clock restart or prevention of clock 


stopping. 


Stop PCI Clock: This signal is an output to the external clock 
generator for it to turn off the PCI clock. It is used to support PCI 
CLKRUN# protocol on mobile platforms. 

In Sx, this pin is also used to communicate the host clock frequency 
select for Management Engine operation in order to support Moff/Sx to 
M1/Sx transitions in a mobile Intel® AMT or ASF enabled system. 


This signal is used as a GPIO in desktop platforms. 


Stop CPU Clock: This signal is an output to the external clock 
generator for it to turn off the processor clock. It is used to support 
the C3 state on mobile platforms. 


In Sx, this pin is also used to communicate the host clock frequency 
select for Management Engine operation in order to support Moff/Sx to 
M1/Sx transitions in a mobile Intel® AMT or ASF enabled system. 


This signal is used as a GPIO in desktop platforms. 


Battery Low: This signal is an input from the battery to indicate that 
there is insufficient power to boot the system. Assertion will prevent 
wake from S3-S5 state. This signal can also be enabled to cause an 
SMI# when asserted. 


Deeper Sleep - Voltage Regulator: This signal is used to lower the 
voltage of the VRM during the C4 state. When the signal is high, the 
voltage regulator outputs the lower “Deeper Sleep” voltage. When low 
(default), the voltage regulator outputs the higher “Normal” voltage. 


Deeper Stop: This is a copy of the DPRSLPVR and it is active low. 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 73 


| | ® 
| Nn tel Signal Description 


2.12 Processor I nterface 


Table 2-12. Processor I nterface Signals (Sheet 1 of 2) 


a) 


Mask A20: A20M# will go active based on either setting the 
appropriate bit in the Port 92h register, or based on the A2Z0GATE 
input being active. 


Numeric Coprocessor Error: This signal is tied to the coprocessor 
error signal on the processor. FERR# is only used if the |CH9 
coprocessor error reporting function is enabled in the OIC.CEN 
register (Chipset Config Registers: Offset 31FFh: bit 1). If FERR# is 
asserted, the |CH9 generates an internal 1RQ13 to its interrupt 
controller unit. It is also used to gate the IGNNE# signal to ensure 
that |GNNE# is not asserted to the processor unless FERR# is active. 
FERR# requires an external weak pull-up to ensure a high level when 
the coprocessor error function is disabled. 

NOTE: FERR# can be used in some states for notification by the 
processor of pending interrupt events. This functionality is 
independent of the OIC register bit setting. 

Ignore Numeric Error: This signal is connected to the ignore error 

pin on the processor. |GNNE# is only used if the |CH9 coprocessor 

error reporting function is enabled in the OIC.CEN register (Chipset 

Config Registers: Offset 31FFh: bit 1). If FERR# is active, indicating a 

coprocessor error, a write to the Coprocessor Error register (1/O 

register FOh) causes the |GNNE# to be asserted. |IGNNE# remains 

asserted until FERR# is negated. If FERR# is not asserted when the 

Coprocessor Error register is written, the |GNNE# signal is not 

asserted. 


Initialization: |NIT# is asserted by the ICH9 for 16 PCI clocks to 

INIT# reset the processor. |CH9 can be configured to support processor 
Built In Self Test (BIST). 
CPU Interrupt: INTR is asserted by the |CH9 to signal to the 

INTR processor that an interrupt request is pending and needs to be 
serviced. It is an asynchronous output and normally driven low. 
Non-Maskable Interrupt: NMI is used to force a non-Maskable 
interrupt to the processor. The |CH9 can generate an NMI when either 
SERR# is asserted or |OCHK# goes active via the SERIRQ# stream. 
The processor detects an NMI when it detects a rising edge on NMI. 
NMI is reset by setting the corresponding NMI source enable/disable 
bit in the NMI Status and Control register (I/O Register 61h). 
System Management Interrupt: SMI # is an active low output 
synchronous to PCICLK. It is asserted by the ICH9 in response to one 
of many enabled hardware or software events. 
Stop Clock Request: STPCLK# is an active low output synchronous 

STPCLK# to PCICLK. It is asserted by the |CH9 in response to one of many 

hardware or software events. When the processor samples STPCLK# 
asserted, it responds by stopping its internal clock. 
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Table 2-12. Processor I nterface Signals (Sheet 2 of 2) 


a) 


Keyboard Controller Reset CPU: The keyboard controller can 
generate INIT# to the processor. This saves the external OR gate 
with the |CH9’s other sources of INIT#. When the ICH9 detects the 
assertion of this signal, INIT# is generated for 

16 PCI clocks. 


NOTE: The ICH9 will ignore RCIN# assertion during transitions to the 
S1, S3, S4, and S5 states. 


A20 Gate: A20GATE is from the keyboard controller. The signal acts 
A20GATE as an alternative method to force the A20M# signal active. It saves 
the external OR gate needed with various other chipsets. 


CPU Power Good: This signal should be connected to the 

CPUPWRGD processor’s PWRGOOD input to indicate when the processor power is 
valid. This is an output signal that represents a logical AND of the 
ICH9’s PWROK and VRMPWRGD signals. 


DPSLP# Deeper Sleep: DPSLP# is asserted by the ICH9 to the processor. 
(Mobile Only) / When the signal is low, the processor enters the deep sleep state by 
TP2 gating off the processor Core Clock inside the processor. When the 
(Desktop Only) signal is high (default), the processor is not in the deep sleep state. 





2.13 SMBus Interface 


Table 2-13. SM Bus Interface Signals 


Pe 
SMBDATA 1/OD_ | SMBus Data: External pull-up resistor is required. 


SMBCLK 1/OD | SMBus Clock: External pull-up resistor is required. 


SMBALERT# / SMBus Alert: This signal is used to wake the system or generate 
GPIO11 SMI#. If not used for SMBALERT#, it can be used as a GPIO. 
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2.14 System Management Interface 


Table 2-14. System Management Interface Signals (Sheet 1 of 2) 


[veme [vee] sero 
Intruder Detect: This signal can be set to disable system if box 
INTRUDER# detected open. This signal's status is readable, so it can be used like a 


GPIO if the Intruder Detection is not needed. 


System Management Link: SMBus link to optional external system 
: management ASIC or LAN controller. External pull-ups are required. 
SEVERE EO yop Note that SMLINKO corresponds to an SMBus Clock signal, and 
SMLINK1 corresponds to an SMBus Data signal. 


SMLink Alert: Output of the integrated LAN controller and input to 
either the integrated ASF, Intel® AMT or an external management 
controller in order for the LAN’s SMLINK slave to be serviced. External 
pull-up resistor is required. 

This signal can instead be used as a GPIO or CLGPIO (Digital Office 
Only). 


LINKALERT# / 
CLGPI O04 
(Digital Office 
Only) / GPIO60 


Memory LED: Provides DRAM-powered LED control. Allows for the 
blinking of an LED to indicate memory activity in all power states. 
This functionality is configured and controlled by the Intel® 
Management Engine. 


This signal can instead be used as GPIO24. 


MEM_LED / 
GP1O024 


(Mobile Only)/ 
CLGPI O1 (Digital 
Office Only) / 
GPIO10 


functionality is configured and controlled by the Management Engine. 
This signal can instead be used as GPIO10 in platforms that do not 
support Intel® AMT or ASF. 

This signal is used as GPIO10 or CLGPIO1 (Digital Office Only) in 
desktop systems. 


AC_PRESENT: This signal is used to indicate to the Intel® 

Management Engine that the platform is connected to an AC power 

source. This functionality is configured and controlled by the 

Management Engine. 

This signal can instead be used as GPIO14 in platforms that do not 

support Intel® AMT or ASF. 

This signal is used as GPIO14 or CLGPIO2 (Digital Office Only) in 

desktop systems. 

NOTE: Even though the signal is controlled by the Management 
Engine, the host can still use this pin to generate SCI/SMI. 


AC_ PRESENT 
(Mobile Only)/ 
CLGPI O2 (Digital 
Office Only) / 
GPIO14 


SUS_ PWR_ACK: This signal is asserted by the Intel® Management 
Engine to indicate when the |CH suspend well may be powered down. 
SUS_PWR_ACK External 10 kQ pull-up resistor to VccSus3_3 is required. This 
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Table 2-14. System Management Interface Signals (Sheet 2 of 2) 


ee rr ae 


WOL_EN / 
GPIO9 


CLGPIO1 
(Digital Office 
Only) / 
SUS_PWR_ACK 
(Mobile Only)/ 
GPIO10 


CLGPIO2 
(Digital Office 
Only) / 
AC_PRESENT 
(Mobile Only) / 
GPIO14 


CLGPIO4 
(Digital Office 
Only) / 
LINKALERT# / 
GPIO60 


CLGPIO5 
(Digital Office 
Only) / 
GPIO57 


CLGPIO6 
(Digital Office 
Only) / 
SPI_CS1#/ 
GPIO58 
(Desktop Only) 
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Wake On LAN Power Enable. In an Intel® AMT or ASF enabled 
system, this output signal is driven high by the ICH to control the LAN 
subsystem power (VccLAN3_3, VccCL3_3, LAN PHY Power, and SPI 
device) to support Wake on LAN (WOL) when the Intel® Management 
Engine is powered off. This functionality is configured and controlled 
by the Management Engine prior to entering the powered off state. 


NOTES: 

1. This signal should be OR’d with the SLP_M# signal on the 
motherboard to determine when to power the LAN subsystem. 

2. In order to support WOL out of a G3 state, the WOL_EN pin 
needs to be pulled high by an external resistor until the 
Management Engine is initialized. 

If ASF or AMT are disabled on a board that is configured for WOL_EN 

support, BIOS must utilize GPIO9 to control power to the LAN 

subsystem when entering S3-S5. 

In platforms that do not support Intel AMT or ASF, this signal is used 

as GPIOQ. 


Controller Link General Purpose I/O 1. This signal is not used by 
the Intel® Management Engine in desktop systems. 

This signal is used as GPIO10 in desktop systems. This signal is used 
as SUS_PWR_ACK in mobile systems. 


Controller Link General Purpose I/O 2. This signal is not used by 
the Intel® Management Engine in desktop systems. 

This signal is used as GPIO14 in desktop systems. This signal is used 
as AC_PRESENT in mobile systems. 


Controller Link General Purpose I/ O 4. This signal is not used by 
the Intel® Management Engine in mobile and desktop systems. 


This signal may be used as GPIO60 or LINKALERT#. 


Controller Link General Purpose I/O 5. This signal is not used by 
the Intel® Management Engine in desktop systems. In mobile 
systems, this signal is asserted to indicate Physical Presence to the 
integrated TPM module. 


This signal is used as GPIO57 in desktop systems. 


Controller Link General Purpose I/ O 6. This signal is not used by 
the Intel® Management Engine in mobile and desktop systems. 


This signal may be used as a GPIO58 (Desktop Only) or SPI_CS1#. 
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2.15 Real Time Clock Interface 


Table 2-15. Real Time Clock Interface 


A 


Crystal Input 1: This signal is connected to the 32.768 kHz crystal. If 
RTCX1 Special | no external crystal is used, then RTCX1 can be driven with the desired 
clock rate. 





7 Crystal Input 2: This signal is connected to the 32.768 kHz crystal. If 
RECKS no external crystal is used, then RTCX2 should be left floating. 
2.16 Other Clocks 


Table 2-16. Other Clocks 


aN 


CLK14 Oscillator Clock: Used for 8254 timers. Runs at 14.31818 MHz. This 
clock is permitted to stop during S3 (or lower) states. 


cLK48 48 MHz Clock: Used to run the USB controller. Runs at 48.000 MHz. 
This clock is permitted to stop during S3 (or lower) states. 


100 MHz Differential Clock: These signals are used to run the SATA 
SATA_CLKP ; ; . F 
is controller at 100 MHz. This clock is permitted to stop during S3/S4/S5 
SATA_CLKN states 


DMI_CLKP, 100 MHz Differential Clock: These signals are used to run the Direct 
DMI_CLKN Media Interface. Runs at 100 MHz. 


2.17 Miscellaneous Signals 





Table 2-17. Miscellaneous Signals (Sheet 1 of 3) 


a 

Internal Voltage Regulator Enable: This signal enables the 

INTVRMEN internal VccSus1_05, VccSus1_5 and VccCL1_5 regulators. 
This signal must be pulled-up to VccRTC. 
Internal Voltage Regulator Enable: When connected to VccRTC, 
this signal enables the internal voltage regulators powering 

EANTOO_SER VecLAN1_05 and VccCL1_05. 

This signal must be pulled-up to VccRTC. 





Speaker: The SPKR signal is the output of counter 2 and is internally 

“ANDed” with Port 61h bit 1 to provide Speaker Data Enable. This 

signal drives an external speaker driver device, which in turn drives 

the system speaker. Upon PLTRST#, its output state is 0. 

NOTE: SPKR is sampled as a functional strap. See Section 2.24.1 for 
more details. There is a weak integrated pull-down resistor on 
SPKR pin. 
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Table 2-17. Miscellaneous Signals (Sheet 2 of 3) 


a errr ae 


RTC Reset: When asserted, this signal resets register bits in the RTC 
well. 
NOTES: 

RTCRST# I. Unless CMOS is being cleared (only to be done in the G3 
power state), the RTCRST# input must always be high when 
all other RTC power planes are on. 

: In the case where the RTC battery is dead or missing on the 
platform, the RTCRST# pin must rise before the RSMRST# 
pin. 

Secondary RTC Reset: This signal resets the manageability register 

bits in the RTC well when the RTC battery is removed. 

NOTES: 

SRTCRST# 1. The SRTCRST# input must always be high when all other RTC 

power planes are on. 

2. In the case where the RTC battery is dead or missing on the 
platform, the SRTCRST# pin must rise before the RSMRST# 
pin. 


TPO 
(Desktop Only) / 
BATLOW# 
(Mobile Only) 


TP1 
(Desktop Only) / - : ‘ : 
DPRSTP# Test Point 1: Route signal to a test point. 
(Mobile Only) 


Test Point 0: This signal must have an external pull-up to 
VccSus3_3. 


TP2 
(Desktop Only) / 
DPSLP# 
(Mobile Only) 


| TPZ O | Test Point 3: Route signal to a test point. 


I/ 
TP4 
(Desktop Only) / 
CL_DATAI 1/O | Test Point 4: Route signal to a test point. 
(Mobile Only) 
TP5 
(Desktop Only) / 
CL_CLK1 (Mobile 1/O | Test Point 5: Route signal to a test point. 
Only) 
TP6 (Desktop 
Only) / . . : F 
CL_VREF1 Test Point 6: Route signal to a test point. 
(Mobile Only) 


Test Point 2: Route signal to a test point. 


TP7 
(Desktop Only) / 
CL_RST1# 
(Mobile Only) 


Test Point 7: Route signal to a test point. 
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Table 2-17. Miscellaneous Signals (Sheet 3 of 3) 


[rene ee[ me 


TP[10:8] 
(Mobile Only) / 
PWM[2:0] 
(Desktop Only) 


TP11 (Mobile 
Only) / SST 1/O | Test Point 11: Route signal to a test point. 
(Desktop Only) 


TP12 (Mobile 
Only) / PECI 1/O | Test Point 12: Route signal to a test point. 
(Desktop Only) 


Test Point [10:8]: Route signal to a test point. 





2.18 Intel® High Definition Audio Link 


Table 2-18. Intel® High Definition Audio Link Signals (Sheet 1 of 2) 
a d 
® wu: eae . z 
Intel” High Definition Audio Reset: Master hardware reset to 


external codec(s). 
HDA_SYNC 


Intel High Definition Audio Sync: 48 kHz fixed rate sample 
sync to the codec(s). Also used to encode the stream number. 


NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for more details. There is a weak 
integrated pull-down resistor on this pin. 


Intel High Definition Audio Serial Data Out: Serial TDM data 
output to the codec(s). This serial output is double-pumped for a 
bit rate of 48 Mb/s for Intel High Definition Audio. 


NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for more details. There is a weak 
integrated pull-down resistor on this pin. 





Intel High Definition Audio Bit Clock Output: 24.000 MHz 
serial data clock generated by the Intel High Definition Audio 

BDA BET_eEr controller (the Intel® 1CH9). This signal has a weak internal pull- 
down resistor. 


HDA_SDOUT 
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Table 2-18. Intel® High Definition Audio Link Signals (Sheet 2 of 2) 


Intel High Definition Audio Serial Data In [3:0]: Serial TDM 
data inputs from the codecs. The serial input is single- pumped 
for a bit rate of 24 Mb/s for Intel® High Definition Audio. These 
signals have integrated pull-down resistors, which are always 
enabled. 


HDA_SDIN[3:0] 


NOTE: During enumeration, the ICH will drive this signal. During 
normal operation, the CODEC will drive it. 


High Definition Audio Dock Enable: This signal controls the 
external Intel HD Audio docking isolation logic. This is an active 
low signal. When deasserted the external docking switch is in 
isolate mode. When asserted the external docking switch 
electrically connects the Intel HD Audio dock signals to the 
corresponding Intel® ICH9 signals. 


This signal can instead be used as GPIO33. 


HDA_DOCK_EN# 
(Mobile Only) / 
GPI033 


NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for more details. 


High Definition Audio Dock Reset: This signal is a dedicated 
HDA DOCK RST# HDA_RST# signal for the codec(s) in the docking station. Aside 
(Mobile Only) / from operating independently from the normal HDA_RST# signal, 
GPIO34 it otherwise works similarly to the HDA_RST# signal. 


This signal can instead be used as GPIO34. 





2.19 Serial Peripheral I nterface (SPI) 


Table 2-19. Serial Peripheral Interface (SPI) Signals 


SPI Chip Select 1: Used as the SPI bus request signal. Signal can 
also be used as a CLGPIO6 (Digital Office Only) or GPIO58 (Desktop 
Only). 


SPI_CS1# / 
CLGPI O06 
(Digital Office 
Only)/ 
GPIO58 
(desktop Only) 


NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for more details. There is a weak integrated 
pull-up resistor on this pin. 


NOTE: This signal is sampled as a functional strap. See 
Section 2.24.1 for more details. There is a weak integrated 
pull-down resistor on this pin. 
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Table 2-20. Controller Link Signals 
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CL_RST1# 
(Mobile Only) / 
TP7 
(Desktop Only) 


CL_CLK1 
(Mobile Only) / 
TP5 
(Desktop Only) 


CL_DATA1 
(Mobile Only) / 
TP4 
(Desktop Only) 


CL_VREF1 
(Mobile Only) / 
TP6 
(Desktop Only) 


1/0 
1/0 
1/0 

/0 





Signal Description 


Controller Link Clock 0: bi-directional clock that connects to the 
(G)MCH. 

Controller Link Data 0: bi-directional data that connects to the 
(G)MCH. 

Controller Link Reference Voltage 0: External reference 
voltage for Controller Link 0. 


Controller Link Reset 0: North Controller Link reset that 
connects to the (G)MCH. 


Controller Link Reset 1: South Controller Link reset that 
connects to a Wireless LAN Device supporting Intel® Active 
Management Technology. 


Controller Link Clock 1: bi-directional clock that connects to a 
Wireless LAN Device supporting Intel® Active Management 
Technology. 


Controller Link Data 1: bi-directional data that connects to a 
Wireless LAN Device supporting Intel® Active Management 
Technology. 


Controller Link Reference Voltage 1: External reference 
voltage for Controller Link 1. 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


Signal Description intel) 


2.21 Intel® Quiet System Technology (Desktop Only) 


Table 2-21. Intel® Quiet System Technology Signals 


Fan Pulse Width Modulation Outputs: Pulse Width Modulated 
duty cycle output signal that is used for Intel® Quiet System 
Technology. 

When controlling a 3-wire fan, this signal controls a power 
transistor that, in turn, controls power to the fan. When 
controlling a 4-wire fan, this signal is connected to the “Control” 
signal on the fan. The polarity of this signal is programmable. 
The output default is low. 


These signals are 5 V tolerant. 


TACHO / 

(Desktop Only) 
GPIO17 
TACH1 / 

(Desktop Only) Fan Tachometer Inputs: Tachometer pulse input signal that is 
GPIO1 used to measure fan speed. This signal is connected to the 
TACH2 / “Sense” signal on the fan. 


PWM[2:0] 
(Desktop Only) / 
TP[10:8] 
(Mobile Only) 


(Desktop Only) Can instead be used as a GPIO. 
GPIO6 
TACHS / 

(Desktop Only) 
GPIO7 


SST 


(Desktop Only) / 
TP1l1 
(Mobile Only) 


PECI 


(Desktop Only) / 
TP12 (Mobile 
Only) 


Simple Serial Transport: Single-wire, serial bus. Connect to 
SST compliant devices such as SST thermal sensors or voltage 
sensors. 


Platform Environment Control I nterface: Single-wire, serial 
bus. Connect to corresponding pin of the processor for accessing 
processor digital thermometer. 





2.22 General Purpose I/ O Signals 


Table 2-22. General Purpose I/O Signals (Sheet 1 of 3) 


Power Peer 
[tame [rvpe|toierance] i” | setour | peserimton 
Multiplexed with LINKALERT#, or can 
GPIO60 1/0 3.3V Suspend Native be used as CLGPIO4 (Digital Office 
Only). (Note 11). 


GPIO59 ee Multiplexed with OC[0]#. (Note 11). 


Multiplexed with SPI_CS1# or can be 
cl ree used as CLGPIO6 (Digital Office Only) 
ales (Note 8 and 10). 
ee eh Can be used as 
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Power F 


« ( 
( 


(3) 


GPIO56 
GPIO55 
GPIO54 
GPIO53 
GPIO52 
GPIO51 
GPIO50 
GPIO49 
GPIO48 
GPIO[47: 44] 
GPIO[43: 40] 
GPIO39 
GPIO38 


1/0 Native Multiplexed with REQ2#. (Note 11) 
1/0 Native | Multiplexed with GNT1# (Note 8). 
1/0 Native | Multiplexed with REQ1#. (Note 11) 


). 

1/0 GPI Multiplexed with SDATAOUT1. 

1/0 Native | Multiplexed with OC[11:8]#. (Note 11). 
). 


Oo 


l/ 


1/0 Native Multiplexed with OC[4:1]#. (Note 11 
GP Multiplexed with SDATAOQUTO. 
GP Multiplexed with SLOAD 
P ; 


~ 


GPIO37 O 


~ 


1/0 GPO Unmultiplexed (Note 8) 


. 


; 

| 

, 3 Desktop: Multiplexed with SATA3GP. 
Mobile: Multiplexed with SATA5GP. 


GPIO36 


~ 


Desktop: Multiplexed with SATA2GP. 
Mobile: Multiplexed with SATA4GP. 


GP1O35 1/0 GPO Multiplexed with SATACLKREQ#. 


3V 
3V 
3.3V 
Mobile: Multiplexed with 
3.3V Core GPO HDA_DOCK_RST#. 
Desktop: UnMultiplexed. 
Mobile: Multiplexed with 
1/0 3.3V Core GPO HDA_DOCK_EN#. 
Desktop: UnMultiplexed. 
3.3V 
3V 
3V 
3V 


GPIO34 1/0 


GPIO32 Mobile: This GPIO is not implemented 
1/0 Core GPO and is used instead as CLKRUN#. 
tDeskrop-Only) Desktop: UnMultiplexed. 


GPIO31 1/0 Native | Multiplexed with OC7#. (Note 11). 
GPIO30 1/0 Native Multiplexed with OC6#. (Note 11). 
( ; 


GPIO28 1/0 GPO Unmultiplexed. 
1/0 GPO Unmultiplexed 
Native | Multiplexed with S4_STATE#. (Note 9) 


Mobile: This GPIO is not implemented 
F and is used instead as STP_CPU#. 
3 Suspend Native 7 
Desktop: Default as STP_CPU# (Note 
4). 


GPIO27 
GPIO26 


GP1029 1/0 Native | Multiplexed with OC5#. (Note 11) 


e) 


/ 


GPIO25 


| 
(Desktop Only) 


Can be used as MEM_LED. GPIO24 
Suspend GPO configuration register bits are not 
cleared by CF9h reset event. 


1/0 Native | Multiplexed with LDRQ1#. (Note 11). 


/O 
GPIO24 1/0 


GPIO23 
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Desktop: Multiplexed with TACHO. 
Mobile: Unmultiplexed 


Table 2-22. General Purpose I/O Signals (Sheet 3 of 3) 


e | Tolerance acai 
ye Well 


GPio17 


GPIO16 cc 
GPIO15 
(Desktop Only) 


Core 


Native 
(Mobile) / Mobile: Natively used as DPRSLPVR. 


GPO Desktop: UnMultiplexed. 
(Desktop) 


Core 


Mobile: GPIO is not implemented and is 
used instead as STP_PCI#. 


Desktop: Default as STP_PCI#. (Note 
4). 


Mobile: Can be used as AC_PRESENT 
Suspend Desktop: Unmultiplexed. Can be used 
as CLGPIO2 (Digital Office Only). 


Suspend Native 


GPIO14 


GPIO13 1/0 


GPio12 
GPio1 


GPIO9 Suspend 
GPIO8 1/0 Suspend 


Suspend Unmultiplexed. 


GPO Mobile: LAN_ PHY_PWR_CTRL. 
Suspend 
(Desktop) | Desktop: UnMultiplexed. 
Multiplexed with SMBALERT#. (Note 


11). 


Mobile: Can be used as SUS_ PWR_ACK. 


Suspend GPI Desktop: Unmultiplexed. Can be used 
as CLGPIO1 (Digital Office Only). 


Native Can be used as WOL_EN. 
pl eel asst 


Mobile: Unmuttiplexed 
Mobile: Unmuttiplexed 
Desktsp: Unmultiplexed 


Suspend Native 





1. All GPIOs can be configured as either input or output. 

2. GPI[15:0] can be configured to cause a SMI# or SCI. Note that a GPI can be routed to 
either an SMI# or an SCI, but not both. 

3. Some GPIOs exist in the VccSus3_3 power plane. Care must be taken to make sure GPIO 


signals are not driven high into powered-down planes. Also, external devices should not be 
driving powered down GPIOs high. Some |CH9 GPIOs may be connected to pins on devices 
that exist in the core well. If these GPIOs are outputs, there is a danger that a loss of core 
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Signal Description 


power (PWROK low) or a Power Button Override event will result in the Intel |CH9 driving a 
pin to a logic 1 to another device that is powered down. 

The functionality that is multiplexed with the GPIO may not be utilized in desktop 
configuration. 

This GPIO is not an open-drain when configured as an output. 

SPI_CS1# and CLGPI06 (Digital Office Only) are located in the VccCL3_3 well. 

When this signal is configured as GPO the output stage is an open drain. 

This signal is sampled as a functional strap. See Section 2.24.1 for more details. 

The GPIO_USE_SEL bit for this signal is overridden by bit 8 in the GEN_PMCON_3 Register 
(D31:FO). 

The GPIO_USE_SEL bit for this is ignored. Functionality is set by bits 9:8 of FLMAPO 
register. 

When the multiplexed GPIO is used as GPIO functionality, care should be taken to ensure 
the signal is stable in its inactive state of the native functionality, immediately after reset 
until it is initialized to GPIO functionality. 


Power and Ground Signals 


Power and Ground Signals (Sheet 1 of 3) 


V5REF Reference for 5 V tolerance on core well inputs. This power may be shut off in 
S3, S4, S5 or G3 states. 


Reference for 5 V tolerance on suspend well inputs. This power is not expected 
to be shut off unless the system is unplugged in desktop configurations or the 

V5REF_Sus F : : : ; 
= main battery is removed or completely drained and AC power is not available 


in mobile configurations. 


Vccl 05 1.05 V supply for core well logic. This power may be shut off in S3, S4, S5 or 
- G3 states. 

Vecl 5 A 1.5 V supply for Logic and 1/O. This power may be shut off in S3, S4, S5 or G3 
= = states. 

Vccl 5 B 1.5 V supply for Logic and 1/O. This power may be shut off in S3, S4, S5 or G3 
= states. 

3.3 V supply for core well 1/O buffers. This power may be shut off in S3, S4, 
Vcc3_3 
= S5 or G3 states. 


1.05V supply for Controller Link. This plane must be on in SO and other times 
Controller Link is used. 
VccCL1_05 : : ; ee Ls 
- This voltage is generated internally. This pin can be left as No Connect unless 
decoupling is required. 
1.5V supply for Controller Link. This plane must be on in SO and other times 
Controller Link is used. 
VccCL1_5 : : : pa ack 
= This voltage is generated internally. This pin can be left as No Connect unless 
decoupling is required. 
3.3V supply for Controller Link. This is a separate power plane that may or 
may not be powered in S3-S5 states. This plane must be on in SO and other 
VccCL3_ 3 5 ae 
= times Controller Link is used. 
NOTE: VccCL3_3 must always be powered when VccLAN3_3 is powered. 


VccDMI ead for DMI. 1.05V, 1.25V or 1.5V depending on (G)MCH’s DMI 


1.5 V supply for core well logic. This signal is used for the DMI PLL. This power 
VccDMIPLL | nay be shut off in S3, $4, S5 or G3 states. 
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Table 2-23. Power and Ground Signals (Sheet 2 of 3) 


a 
VccGLAN1_5 1.5V supply for integrated Gigabit LAN I/O buffers. This power is on in SO and 


is turned off in S3, S4, S5, even if integrated Gigabit LAN is not used. 
VccGLAN3 3 3.3V supply for integrated Gigabit LAN logic and I/O. This power is on in SO 
= and is turned off in S3, S4, S5, even if integrated Gigabit LAN is not used. 


1.5V supply for core well logic. This signal is used for the integrated Gigabit 
VccGLANPLL | | AN PLL. This power is shut off in $3, S4, $5 and G3 states. 


Core supply for Intel® High Definition Audio. This pin can be either 1.5 or 3.3 
V. This power may be shut off in S3, S4, S5 or G3 states. 
VccHDA NOTE: VccSusHDA and VccHDA can be connected to either 1.5 V or 3.3 V 
supplies, but both pins must be connected to supplies that are the 


same nominal value. 


1.05 V supply for LAN controller logic. This is a separate power plane that may 
VccLAN1 05 or Tey not be powered Nona states. . 
- This voltage is generated internally. These pins can be left as No Connect 
unless decoupling is required. 
3.3 V supply for LAN Connect interface buffers. This is a separate power plane 
VccLAN3 3 that may or may not be powered in S3-S5 states. This plane must be on in SO. 
as NOTE: VccLAN3_3 must always be powered when VccCL3_3 or Vcc3_3 is 


powered. 


3.3 V (can drop to 2.0 V min. in G3 state) supply for the RTC well. This power 
is not expected to be shut off unless the RTC battery is removed or completely 
drained. 
VccRTC ; , : 
Note: Implementations should not attempt to clear CMOS by using a jumper 
to pull VccRTC low. Clearing CMOS in an Intel® ICH9-based platform can be 
done by using a jumper on RTCRST# or GPI. 
1.5 V supply for core well logic. This signal is used for the SATA PLL. This 
VccSATAPLL | power may be shut off in S3, S4, S5 or G3 states. Must be powered even if 
SATA is not used. 
1.05 V supply for suspend well logic. This power is not expected to be shut off 
unless the system is unplugged in desktop configurations or the main battery 
is removed or completely drained and AC power is not available in mobile 
VecSus1_05 | configurations. 
This voltage is generated internally. These pins can be left as No Connects 
unless decoupling is required. 
1.5V supply for the suspend well |/O. This power is not expected to be shut off 
unless the system is unplugged in desktop configurations. 
VccSus1_5 : . ' : 
- This voltage is generated internally. These pins can be left as No Connects 
unless decoupling is required. 


3.3 V supply for suspend well I/O buffers. This power is not expected to be 
shut off unless the system is unplugged in desktop configurations or the main 
VccSus3_3 . : : : ‘ 
= battery is removed or completely drained and AC power is not available in 


mobile configurations. 


Suspend supply for Intel® High Definition Audio. This pin can be either 1.5 or 
3.3 V. This power is not expected to be shut off unless the system is 
unplugged in desktop configurations or the main battery is removed or 
VccSusHDA | completely drained and AC power is not available in mobile configurations. 
NOTE: VccSusHDA and VccHDA can be connected to either 1.5 V or 3.3 V 
supplies, but both pins must be connected to supplies that are the 


same nominal value. 
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Table 2-23. Power and Ground Signals (Sheet 3 of 3) 


ee rr ee 


1.5 V supply for core well logic. This signal is used for the USB PLL. This power 
VccUSBPLL may be shut off in S3, S4, S5 or G3 states. Must be powered even if USB not 
used. 


Vv cPU 10 Powered by the same supply as the processor I/O voltage. This supply is used 
= = to drive the processor interface signals listed in Table 2-12. 


2.24 Pin Straps 





2.24.1 Functional Straps 


The following signals are used for static configuration. They are sampled at the rising 
edge of PWROK to select configurations (except as noted), and then revert later to their 
normal usage. To invoke the associated mode, the signal should be driven at least four 
PCI clocks prior to the time it is sampled. 


Table 2-24. Functional Strap Definitions (Sheet 1 of 3) 


When Comment 
Sampled 


XOR Chain Allows entrance to XOR Chain testing when TP3 
Entrance / PCI Rising Ed f pulled low at rising edge of PWROK. 
HDA_SDOUT | Express* Port | ™°13N OCE° °' | when TP3 not pulled low at rising edge of PWROK, 
Config 1 bit 1 sets bit 1 of RPC.PC (Chipset Config Registers: Offset 


(Port 1-4) 224h).This signal has a weak internal pull-down. 


This signal has a weak internal pull-down. 
PCI Express Rising Edge of or ” nea ne ss 


HDA_SYNC Port Config 1 PWROK Sets bit 0 of RPC.PC (Chipset Config Registers: Offset 
bit O (Port 1-4) 224h) 


PCI Express Bea edna This signal has a weak internal pull-up. 
GNT2# / GPIO53 | Port Config 2 ae Sets bit 2 of RPC.PC2 (Chipset Config 
bit 2 (Port 5-6) Registers: Offset 0224h) when sampled low. 


Rising Edge of | This signal has a weak internal pull-down. 
Grineo PWROK | NOTE: This signal should not be pulled high 


Tying this strap low configures DMI for ESI- 
compatible operation. This signal has a weak internal 
ESI Strap Rising edge of | pull-up. 

GNErerORst (Server Only) PWROK NOTE: ESI compatible mode is for server platforms 
only. This signal should not be pulled low for 
desktop and mobile. 

The signal has a weak internal pull-up. If the signal is 
sampled low, this indicates that the system is 
strapped to the “top-block swap” mode (Intel® ICH9 
es inverts A16 for all cycles targeting BIOS space). The 
GNT3# / GPIO55 Peawam ee a status of this strap is readable via the Top Swap bit 
P (Chipset Config Registers: Offset 3414h: bit 0). Note 
that software will not be able to clear the Top-Swap 
bit until the system is rebooted without GNT3# being 
pulled down. 
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Table 2-24. Functional Strap Definitions (Sheet 2 of 3) 


This field determines the destination of accesses to 
the BIOS memory range. Signals have weak internal 
pull-ups. Also controllable via Boot BIOS Destination 
bit (Chipset Config Registers: Offset 3410h: bit 11). 
This strap is used in conjunction with Boot BIOS 
Destination Selection O strap. 


Bit11 Bit 10 Boot BIOS 
(GNTO#) (SPI_CS1#) Destination 
0 1 SPI 
Rising Edge of 1 0 PCI 
PROK 1 1 LPC 
0 0 


Reserved 


Boot BIOS 
Destination 
Selection 1 


NOTE: Booting to PCI is intended for debug/testing 
only. Boot BIOS Destination Select to LPC/PCI 
by functional strap or via Boot BIOS 
Destination Bit will not affect SPI accesses 
initiated by Management Engine or 
Integrated GbE LAN. 


This field determines the destination of accesses to 
the BIOS memory range. Signals have weak internal 
pull-ups. Also controllable via Boot BIOS Destination 
bit (Chipset Config Registers: Offset 3410h: bit 10). 
This strap is used in conjunction with Boot BIOS 
Destination Selection 1 strap. 
Bit11 Bit 10 Boot BIOS 
SPI_CS1# / (GNTO#) (SPI_CS1#) Destination 
GPIO58 0 1 SPI 
Desktop Only) / aoa Rising Edge of 1 0 PCI 
CLGPI O06 , CLPWROK Cc 
(Digital Office Selection 0 1 1 LP 
Only) 0 0 Reserved 


Booting to PCI is intended for debug/testing 
only. Boot BIOS Destination Select to LPC/PCI 
by functional strap or via Boot BIOS 
Destination Bit will not affect SPI accesses 
initiated by Management Engine or 
Integrated GbE LAN. 


PCI Express BiginaEdae oF Signal has weak internal pull-up. 
SATALED# Lane Reversal case Sets bit 27 of MPC.LR (Device 28: Function 0: Offset 
PWROK 
(Lanes 1-4) D8) 


The signal has a weak internal pull-down. If the 
signal is sampled high, this indicates that the system 
Rising Edge of | is strapped to the “No Reboot” mode (ICH9 will 
PWROK disable the TCO Timer system reboot feature). The 
status of this strap is readable via the NO REBOOT 
bit (Chipset Config Registers: Offset 3410h: bit 5). 


Rising Edge of | This signal has a weak internal pull-up. This signal 
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Table 2-24. Functional Strap Definitions (Sheet 3 of 3) 


When 


This signal has a weak internal pull-up resistor. If 
Flash sampled low, the Flash Descriptor Security will be 
Descriptor Rising Edge of | overridden. If high, the security measures defined in 
Security PWROK the Flash Descriptor will be in effect. 
Override Strap NOTE: This strap should only be enabled in 
manufacturing environments. 


GPIO33 / 
HDA_DOCK_EN# 
(Mobile Only) 


DMI Rising Edae of The signal is required to be low for desktop 
GPIO49 Termination ee applications and required to be high for mobile 


Voltage RaunDE applications. 


Rising Edge of | This signal has a weak internal pull-down resistor. 
oeEMOs! CLPWROK | This signal should not be pulled high. 


This signal has a weak internal pull-down resistor. 

When the signal is sampled low the Integrated TPM 

will be disabled. When the signal is sampled high, 

SPI_MOSI Integrated TPM | Rising Edge of | the MCH TPM enable strap is sampled low and the 

(Moble Only) CLPWROK TPM Disable bit is clear, the Integrated TPM will be 

enabled. 

NOTE: This signal is required to be floating or pulled 

low for desktop applications. 





NOTE: See Section 3.1 for full details on pull-up/ pull-down resistors. 


2.24.2 External RTC Circuitry 


To reduce RTC well power consumption, the |CH9 implements an internal oscillator 
circuit that is sensitive to step voltage changes in VccRTC. Figure 2-3 shows an 
example schematic recommended to ensure correct operation of the ICH9 RTC. 


Figure 2-3. Example External RTC Circuit 





3.3V Sus > 
Schottky Diodes 


> 
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NOTE: Cl and C2 depend on crystal load. 
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3 Intel® |CH9 Pin States 


3.1 Integrated Pull-Ups and Pull-Downs 


Table 3-1. Integrated Pull-Up and Pull-Down Resistors 


CL_CLK[1: 0] Pull-up 20K 


DPRSLPVR (Mobile Only)/GP1O16 20K 2, 10 
HDA_DOCK_EN# (Mobile Only)/GP1033 20k 
HDA_SDIN[3:0] 20K 
a 
feroas ie | aT 
wor «YC | eK 
Se 
SPI_CS1# / GPIO58 (Desktop Only) / Pee [om fo 
CLGPI 06 (Digital Office Only) 

samo «Chto | OKT 
ews aap | 208 3 
a 
(Ea 


Simulation data shows that these resistor values can range from 10 k&2 to 40 kQ. 
Simulation data shows that these resistor values can range from 9 kQ to 50 kQ. 
Simulation data shows that these resistor values can range from 15 kQ to 35 kQ. 
Simulation data shows that these resistor values can range from 7.5kQ to 16kQ 
Simulation data shows that these resistor values can range from 14.25 kQ2 to 24.8 kQ 





Gr PG) Noe 
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6. Simulation data shows that these resistor values can range from 10 kQ to 30 kQ 

7. The pull-up or pull-down on this signal is only enabled at boot/reset for strapping function. 

8. Simulation data shows that these resistor values can range from 10 kQ to 20 kQ The 
internal pull-up is only enabled during PLTRST# assertion. 

9. The pull-down on this signal is only enabled when in S3. 

10. The pull-up or pull-down on this signal is only enabled during reset. 

11. The pull-up on this signal is not enabled when PCIRST# is high. 

12. The pull-up on this signal is enabled when the core power is valid. 

13. Simulation data shows that these resistor values can range from 15 kQ to 31 kQ. 


Output and I/ O Signals Planes and States 


Table 3-2 and Table 3-3 shows the power plane associated with the output and I/O 
signals, as well as the state at various times. Within the table, the following terms are 
used: 


“High-Z” Tri-state. |CH9 not driving the signal high or low. 

“High” ICH9 is driving the signal to a logic 1. 

“Low” ICH9 is driving the signal to a logic 0. 

“Defined” Driven to a level that is defined by the function or external pull- 
up/ pull-down resistor (will be high or low). 

“Undefined” ICH9 is driving the signal, but the value is indeterminate. 

“Running” Clock is toggling or signal is transitioning because function not 
stopping. 

“Off” The power plane is off; |CH9 is not driving when configured as 


an output or sampling when configured as an input. 


“Input” ICH9 is sampling and signal state determined by external driver. 
Signal levels are the same in S4 and S5, except as noted. 


ICH9 suspend well signal states are indeterminate and undefined and may glitch prior 
to RSMRST# deassertion. This does not apply to LAN_RST#, SLP_S3#, SLP_S4#, 
S4_STATE# and SLP_S5#. These signals are determinate and defined prior to 
RSMRST# deassertion. 


ICH9 core well signal states are indeterminate and undefined and may glitch prior to 


PWROK assertion. This does not apply to FERR# and THRMTRIP#. These signals are 
determinate and defined prior to PWROK assertion. 
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Table 3-2. Power Plane and States for Output and I/ O Signals for Desktop Configurations 
(Sheet 1 of 4) 


: Power During Immediately 


PCI Express* 


PETp[5:1], 
PETn[5:1], . . , 
ql Core High High® Defined Off Off 
PETp6 / GLANTXp, 
PETn6 / GLANTXn 


PCI Bus 
FRAME# Core High-Z 


| High-z | off | Of | 
GNTO#!?!, 

GNT[3:1]#11/ Core High-Z High High Off Off 

GPIO[55, 53, 51] 

IRDY#, TRDY# Core High-Z High-Z High-Z 
PERR# Core High-Z High-Z High-Z 
PLOCK# Core High-Z High-Z High-Z 
STOP# Core High-Z High-Z High-Z 


LPC Interface 


Low 


LPCPD# / ; ; 


LAN Connect Interface 


Gigabit LAN Connect I nterface 


GLAN_TXp / PETp6, ; 
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Table 3-2. Power Plane and States for Output and I/ O Signals for Desktop Configurations 
(Sheet 2 of 4) 


7 Power During Immediately 


SATA Interface 


eo 
— : 


SDATAOUT[1:0]/ ; 


PIRQIA: DI#, High-Z High-Z High-Z 


PIRQUH:E]# / 


Off 
SERIRQ High-Z High-Z High-Z Off 


USB Interface 


Power Management 
Low Low 
Low 


a [oe [oe [oe [oe Do 
[—ecpwncd | Svspena [tow [Hah [Hoh [tow [tow 
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Table 3-2. Power Plane and States for Output and I/ O Signals for Desktop Configurations 
(Sheet 3 of 4) 


- Power During Immediately 


Processor I nterface 


Dependant 
A20M# CPU on A20GATE See Note 1 High Off Off 
Signal 


SMBus Interface 


SMBCLK, SMBDATA | Suspend High-Z High-Z 


System Management Interface 


LINKALERT# / 
CLGPI 04 (Digital Suspend High-Z High-Z Defined Defined Defined 
Office Only) / GPIO60 


Miscellaneous Signals 


Intel® High Definition Audio I nterface 


UnMultiplexed GPIO Signals 
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Table 3-2. Power Plane and States for Output and I/ O Signals for Desktop Configurations 
(Sheet 4 of 4) 


Plane Reset after Reset 


S4/S5 


Ww 
Ww 


ff 
i f 


SPI Interface 


SPI_CS1#!1/ 
= Controller : . F : 
GPIO58 / CLGPIO6 tink High High Defined Defined Defined 
(Digital Office Only) 


Controller Link 


Intel® Quiet System Technology 


ma [en 





NOTES: 

i, ICH9 drives these signals High after the processor Reset 

2. GPIO[18] will toggle at a frequency of approximately 1 Hz when the ICH9 comes out of 
reset 

3. CPUPWRGD represents a logical AND of the |CH9’s VRMPWRGD and PWROK signals, and 
thus will be driven low by ICH9 when either VRMPWRGD or PWROK are inactive. 

4. The states of Core and processor signals are evaluated at the times During PLTRST# and 


Immediately after PLTRST#. The states of the LAN and GLAN signals are evaluated at the 
times During LAN_RST# and Immediately after LAN_RST#. The states of the Controller 
Link signals are taken at the times During CL_RST# and Immediately after CL_RST#. The 
states of the Suspend signals are evaluated at the times During RSMRST# and 
Immediately after RSMRST#. The states of the HDA signals are evaluated at the times 
During HDA_RST# and Immediately after HDA_RST#. 
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5. ICH9 drives these signals Low before PWROK rising and Low after the processor Reset. 

6. SLP_S5# signals will be high in the S4 state. 

7. Low until Intel High Definition Audio Controller Reset bit set (D27: FO: Offset 
HDBAR+08h: bit 0), at which time HDA_RST# will be High and HDA_BIT_CLK will be 
Running. 

8. PETp/n[6:1] high until port is enabled by software. 

9. The SLP_M# state will be determined by Intel AMT Policies. 

10. The state of signals in S3-5 will be defined by Intel AMT Policies. 

11. This signal is sampled as a functional strap during reset. 


Table 3-3. Power Plane and States for Output and I/ O Signals for Mobile Configurations 
(Sheet 1 of 4) 


5 Power During Immediately | C3/ C4/ 


PCI Express* 


PETp[5:1], 
PETn[5:1 
nt Core High High® Defined Defined Off Off 
PETp6 / GLANTXp, 
PETn6 / GLANTXn 


PCI Bus 
i 


GNTO#?+?, 
GPIO[55, 53, 51] 
ee a 


LPC Interface 
LAD[3: 0] / 
LFRAME# / | LFRAME# / FWHI4] | | Core | | High | | High | High | | High | 
a / ; : . 
LAN Connect I nterface 
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Table 3-3. Power Plane and States for Output and I/ O Signals for Mobile Configurations 
(Sheet 2 of 4) 


Power During Immediately | C3/ C4/ 


Gigabit LAN Connect I nterface 


GLAN_TXp / 
PET6p, GLAN_TXn GLAN High High Defined | Defined Off Off 
/ PET6n 


SATA I nterface 


SATA[5:4, 1: 0]TXP, : : : : 


| SATARBIAS —_| | Core | | High-Z | Z | High-Z Z | Defined | | Defined | 


Sanne / 


SLOAD | SLOAD / GPIO38 | GPIO38 | Core | | Input | | input | Defined | | Defined | 
cs 0] / 


Pl | PIRQIA:DI#] | D]#] | Core | | High-Z | Z | High-Z Z | Defined | | Defined | 


PI Reon) Ele 


USB Interface 


Power Management 


[waRsT# [Suspend [tow [Roh [Aah [Woh [tow [tow 
a eS 
| SLP_S4# | S4# | Suspend | | High | High | | Defined | 


ae) oe |e [rr | [ 


i 
ee a ee 
| STP_PCI# PCI # | Suspend | | Defined | | High | 


= STAT# / 
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Table 3-3. Power Plane and States for Output and I/ O Signals for Mobile Configurations 
(Sheet 3 of 4) 


Power During Immediately | C3/ C4/ 


| CK_PWRGD | PWRGD | Suspend | | High | High | 


Processor I nterface 


Dependant 
on 
A20M# CPU A20GATE See Note 1 Defined High 
Signal 


[_erurwnco [cru [Seencres[ oh [ won| woh] of | oF 
renee | “ero wah [See te wh [rah | oF | or 


SMBus Interface 


System Management Interface 


MEM_LED / 
GPIO24 | suspend | | tow] tow | derined | defines | | Derined | | Defines | Defined | 
SUS_PWR_ACK 
(Digital Office Suspend Input Input Defined Defined Defined Defined 
Only) / GPIO10 
AC_PRESENT 
Digital Office 
( “UAW Suspend Input Input Defined Defined Defined Defined 
GPIO14 


WOL_EN | WOL_EN / GPIO9 | GPIO9 | Suspend | | High-Z | Z | High-Z Z | Defined | | Defined | | Defined | | Defined | 


CLGPIO5 a 
Office Only)/ Suspend Input Input Defined Defined Defined Defined 
GPIO57 


| SMLINK[1:0] | 0] | Suspend | | High-Z | Z | High-Z Z | Defined | | Defined | | Defined | | Defined | 
SHIN NKALERT# / 
GPIO60 / CLGPIO4 
(Digital Office Suspend High-Z High-Z Defined Defined Defined Defined 
Only) 
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Table 3-3. Power Plane and States for Output and I|/ O Signals for Mobile Configurations 
(Sheet 4 of 4) 


: Power During Immediately | C3/C4/ 


Miscellaneous Signals 


Intel® High Definition Audio Interface 


Low? 


OR 
HDA_DOCK_RST# : . 
HDA_DOCK_EN#/ 


UnMultiplexed GPIO Signals 


SPI Interface 


Controller Link 


CL_CLKO, Controller : 10 : 10 ‘ 10 ‘ 10 
aM als ible sh ena [ea 
CL_CLK1, , 10 : 10 ‘ 10 ‘ 10 
Cea ee ee eli eal ee 





NOTES: 

1. ICH9 drives these signals High after the processor Reset 

2. GPIO[18] will toggle at a frequency of approximately 1 Hz when the ICH9 comes out of 
reset 
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3. CPUPWRGD represents a logical AND of the |CH9’s VRMPWRGD and PWROK signals, and 
thus will be driven low by ICH9 when either VRMPWRGD or PWROK are inactive. 
4. The states of Core and processor signals are evaluated at the times During PLTRST# and 


Immediately after PLTRST#. The states of the LAN and GLAN signals are evaluated at the 
times During LAN_RST# and Immediately after LAN_RST#. The states of the Controller 
Link signals are evaluated at the times During CL_RST# and Immediately after CL_RST#. 
The states of the Suspend signals are evaluated at the times During RSMRST# and 
Immediately after RSMRST#. The states of the HDA signals are evaluated at the times 
During HDA_RST# and Immediately after HDA_RST#. 


5. ICH9 drives these signals Low before PWROK rising and Low after the processor Reset. 

6. SLP_S5# signals will be high in the S4 state. 

7. Low until Intel High Definition Audio Controller Reset bit set (D27: FO: Offset 
HDBAR+08h: bit 0), at which time HDA_RST# will be High and HDA_BIT_CLK will be 
Running. 

8. PETp/n[6:1] high until port is enabled by software. 

9. The SLP_M# state will be determined by Intel AMT policies. 

10. The state of these signals in S3-5 will be defined by Intel AMT Policies. 

11. This signal is sampled as a functional strap during reset. 


12. PMSYNC# is low during C5/C6 state only. 


3.3 Power Planes for I nput Signals 


Table 3-4 and Table 3-5 shows the power plane associated with each input signal, as 
well as what device drives the signal at various times. Valid states include: 


High 

Low 

Static: Will be high or low, but will not change 
Driven: Will be high or low, and is allowed to change 
Running: For input clocks 


ICH9 suspend well signal states are indeterminate and undefined and may glitch prior 
to RSMRST# deassertion. This does not apply to LAN_RST#, SLP_S3#, SLP_S4#, 
S4_STATE# and SLP_S5#. These signals are determinate and defined prior to 
RSMRST# deassertion. 


ICH9 core well signal states are indeterminate and undefined and may glitch prior to 


PWROK assertion. This does not apply to FERR# and THRMTRIP#. These signals are 
determinate and defined prior to PWROK assertion. 
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Table 3-4. Power Plane for Input Signals for Desktop Configurations (Sheet 1 of 3) 


Signal Name Power Well Driver During Reset | sa | sa | S4/S5 


DMI_CLKP, ; 
DMI[3:0]RXP, ; 
DMIs O1RAY sail pea nee 


PCI Express* 


PERp[5:1], 

PERn[5:1], 
PERp6 / 4 : : 

GLAN_RXp, Core PCI Express* Device Driven Off Off 
PERn6 / 

GLAN_RXn 


PCI Bus 


REQO#, 

REQ1# / 

GPIO50! 

REQ2# ui Core External Pull-up Driven Off Off 
GPIO52 

REQ3# / 

GPI054+ 


LPC Interface 


LDRQ1# / : ' 


LAN Connect I nterface 


Gigabit LAN Connect I nterface 


GLAN_RXp / 
PER6p, Gigabit Lan Connect : 
GLAN_RXn / suspend Component Bren 
PER6n 
SATA Interface 
SATA_CLKP, ‘ 
SATA[5: 0] RXP, : : 
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Table 3-4. Power Plane for Input Signals for Desktop Configurations (Sheet 2 of 3) 


Signal Name Power Well Driver During Reset 


SATA[5: 4]GP 
SATA[3:0]GP / External Device or ‘ 
GPIO[37, 36, 19, Core External Pull-up/Pull-down | Driven 
21] 


USB Interface 


OCO# / GPIO59, 
OC[4:1]# / 
GPIO[43: 40], 
OC[7:5]#/ GPIO Suspend External Pull-ups Driven Driven Driven 
[31:29], 
OC[11:8]# / 
GPIO[47: 44] 


USBRBIAS# External Pull-down Driven 


Power Management 


CLPWROK External Circuit Driven 


SYS_RESET# 

Off 

Off 

VRMPWRGD Suspend PROCESS oF Volrage High Low 
Regulator 


Processor I nterface 


A20GATE External Microcontroller Off 
RCIN# External Microcontroller Off 


SMBus Interface 


SMBALERT# / : : . 


System Management Interface 


INTRUDER# RTC External Switch High 


Miscellaneous Signals 


INTVRMEN 
LAN100_SLP 


RTC 
RTC 
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Table 3-4. Power Plane for Input Signals for Desktop Configurations (Sheet 3 of 3) 


Signal Name Power Well Driver During Reset | sa | sa | S4/S5 
SRTCRST# External RC Circuit High 


Intel® High Definition Audio I nterface 


. Intel High Definition Audio 


SPI Interface 


Intel® Quiet System Technology 


TACH[3:0]/ ' 


Clocks 


NOTES: 
1. These signals can be configured as outputs in GPIO mode. 





Table 3-5. Power Plane for Input Signals for Mobile Configurations (Sheet 1 of 3) 


. Power 5 . C3/ C4/ 
Signal Name Driver During Reset C5/ C6 post | ss S4/S5 


DMI_CLKP : : 

DMI_CLKN Core Clock Generator Running | Running 
DMI[3:0]RXP, F F 
DMIs O1RxN — ied ——. ial 


PCI Express 


PCI Bus 


REQO#, 
1 
oa mel External Pull-up Driven | Driven | Off Off 
REQ3/GPI054+ 


LPC Interface 
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Table 3-5. Power Plane for Input Signals for Mobile Configurations (Sheet 2 of 3) 


a Power . q C3/ C4/ 
Signal Name Well Driver During Reset C5/ C6 | st | S4/S5 


LDRQO# Core LPC Devices Off 


Platform LAN Connect Interface 
= Component 
= Bens Cor ponent 
= Component 


Gigabit LAN Connect I nterface 
GLAN_RX i i 
-™P GLAN Gigabit Lan Connect | Driven | Driven | Off Off 
GLAN_RXn Component 
SATA Interface 
SATA_CLKP, ‘ ‘ 
SATA[5:4, 1:0]RXP, : : : 


External Device or 
SATA[5:4, 1:0]GP / i 
GPIO[37, 36, 19, 21] ice rae et 


USB Interface 


OCO# / GPIO59, 
OC[7:5]# / 
GPIO[31:29], 
OC[4:1]# / Suspend External Pull-ups Driven Driven Driven Driven 
GPIO[43:40], 
OC[11:8]# / 
GPIO[47: 44] 


USBRBIAS# External Pull-down | Driven 


Power Management 


i Ww 


VRMPWRGD Suspend pngeeeser voNrede Driven Driven Low Li 
Regulator 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 105 


] ® 
| Nn tel Intel® 1CH9 Pin States 


Table 3-5. Power Plane for Input Signals for Mobile Configurations (Sheet 3 of 3) 


Signal Name pail Driver During Reset yep post | ss S4/S5 


Processor I nterface 


A20GATE Core Externe) Static | Static Off Off 
Microcontroller 


External : : 


SMBus Interface 


System Management Interface 


Miscellaneous Signals 


Intel® High Definition Audio Interface 


. Intel High Definition ' 
ene Audio Codec pal 


SPI Interface 


Clocks 





NOTE: 
iL, These signals can be configured as outputs in GPIO mode. 
2. The state of the DPRSLPVR and DPRSTP# signals in C4 are high if Deeper Sleep is enabled 


or low if it is disabled. 


§§ 
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4 Intel® I1CH9 and System Clock 
Domains 


Table 4-1 shows the system clock domains. Figure 4-1 and Figure 4-2 shows the 
assumed connection of the various system components, including the clock generator 
in both desktop and mobile systems. For complete details of the system clocking 
solution, refer to the system’s clock generator component specification. 


Table 4-1. Intel® 1CH9 and System Clock Domains 


heksans Frequenc 
Domain q y 


nae Main Clock 
SATA_CLKP, 100 MHz Differential clock pair used for SATA. 


SATA_CLKN Generator 


ee Main Clock 
DMI_CLKP, 100 MHz Gencrator Differential clock pair used for DMI. 
DMI_CLKN 


Free-running PCI Clock to Intel® 1CH9. This clock 
. remains on during SO and S1 (in desktop) state, 
Eee 33 MHz panies. and is expected to be shut off during S3 or below 
in desktop configurations or S1 or below in 
mobile configurations. 


Mainclock PCI Bus, LPC I/F. These only go to external PCI 
System PCI 33 MHz Generator and LPC devices. Will stop based on CLKRUN# 
(and STP_PCI#) in mobile configurations. 


EB | ecoomme Main Glock Super I/O, USB controllers. Expected to be shut 
48.000 MHz off during S3 or below in desktop configurations 
CLK48 Generator : : : : 
or S1 or below in mobile configurations. 
Used for ACPI timer and HPET. Expected to be 
ICH9 14.31818 Main Clock | shut off during S3 or below in desktop 
CLK14 MHz Generator configurations or S1 or below in mobile 
configurations. 
Generated by the LAN Connect component. 
GLAN CLK 5 to 62.5 LAN Connect | Expected to be shut off during S3 or below in 
= MHz Component | desktop configurations or S1 or below in mobile 
configurations. 


17.86 MHz/ Generated by the ICH. Expected to be shut off 
SPI_CLK : during S3 or below in desktop configurations or 
= 31.25 MHz . : : : 
S1 or below in mobile configurations. 
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Figure 4-1. Desktop Conceptual System Clock Diagram 


PCI Clocks 


14.31818 MHz (33 MHz) 


48.000 MHz 


14.31818 MHz 
48 MHz 





SATA 100 MHz Diff. Pair 


DMI 100 MHz Diff. Pair 100 MHz Diff. Pair 


1106 PCI Express 


Differential 
Clock Fan 100 MHz 


Out Device Diff. Pairs 


62.5 MHz LAN Connect 


HD Audio Codec(s) 


SUSCLK# (32 kHz) 





Figure 4-2. Mobile Conceptual Clock Diagram 


PCI Clocks 
14.31818 MHz (33 MHz) 
48.000 MHz 
STP_CPU# 14.31818 MHz 
STP_PCl# 46 Nae 


@ [SATA 100 MHz Diff. Pair 
Intern 
ICH9M | DMI 100 MHz Diff. Pair 7400 MHz Diff. Pair 


1to6 PCI Express 


Differential 
Clock Fan 100 MHz 


Out Device Diff. Pairs 





ba 5 MHz LAN Connect 


24 MHz HD Audio Codec(s) 





SUSCLK# (32 kHz) 
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5 


5.1 


5.1.1 


5.1.2 


Table 5-1. 


Functional Description 


This chapter describes the functions and interfaces of the Intel® |CH9 family. 


DMI -to-PCI Bridge (D30:FO) 


The DMI-to-PCI bridge resides in PCI Device 30, Function 0 on bus #0. This portion of 
the ICH9 implements the buffering and control logic between PCI and Direct Media 
Interface (DMI). The arbitration for the PCI bus is handled by this PCI device. The PCI 
decoder in this device must decode the ranges for the DMI. All register contents are 
lost when core well power is removed. 


Direct Media Interface (DMI) is the chip-to-chip connection between the Memory 
Controller Hub / Graphics and Memory Controller Hub ((G)MCH) and I/O Controller Hub 
9 (ICH9). This high-speed interface integrates advanced priority-based servicing 
allowing for concurrent traffic and true isochronous transfer capabilities. Base 
functionality is completely software transparent permitting current and legacy software 
to operate normally. 


In order to provide for true isochronous transfers and configurable Quality of Service 
(QoS) transactions, the |CH9 supports two virtual channels on DMI: VCO and VC1. 
These two channels provide a fixed arbitration scheme where VC1 is always the highest 
priority. VCO is the default conduit of traffic for DMI and is always enabled. VC1 must be 
specifically enabled and configured at both ends of the DMI link (i.e., the |CH9 and 
(G)MCH). 


Configuration registers for DMI, virtual channel support, and DMI active state power 
management (ASPM) are in the RCRB space in the Chipset Config Registers 
(Chapter 10). 


DMI is also capable of operating in an Enterprise Southbridge Interface (ESI) 
compatible mode. ESI is a chip-to-chip connection for server chipsets. In this ESI- 


compatible mode, the DMI signals require AC coupling. A hardware strap is used to 
configure DMI in ESI-compatible mode, see Section 2.24 for details. 


PCI Bus Interface 
The ICH9 PCI interface supports PCI Local Bus Specification, Revision 2.3, at 33 MHz. 


The ICH9 integrates a PCI arbiter that supports up to four external PCI bus masters in 
addition to the internal |CH9 requests. 


PCI Bridge As an Initiator 


The bridge initiates cycles on the PCI bus when granted by the PCI arbiter. The bridge 
generates the following cycle types: 


PCI Bridge Initiator Cycle Types 


a 


Configuration Read/Write | Ah/Bh 
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Memory Reads and Writes 


The bridge bursts memory writes on PCI that are received as a single packet from DMI. 


1/O Reads and Writes 


The bridge generates single DW I/O read and write cycles. When the cycle completes 
on the PCI bus, the bridge generates a corresponding completion on DMI. If the cycle is 
retried, the cycle is kept in the down bound queue and may be passed by a postable 
cycle. 


Configuration Reads and Writes 


The bridge generates single DW configuration read and write cycles. When the cycle 
completes on the PCI bus, the bridge generates a corresponding completion. If the 

cycle is retried, the cycle is kept in the down bound queue and may be passed by a 
postable cycle. 


Locked Cycles 


The bridge propagates locks from DMI per the PCI Local Bus Specification. The PCI 
bridge implements bus lock, which means the arbiter will not grant to any agent except 
DMI while locked. 


If a locked read results in a target or master abort, the lock is not established (as per 
the PCI Local Bus Specification). Agents north of the I|CH9 must not forward a 
subsequent locked read to the bridge if they see the first one finish with a failed 
completion. 


Target / Master Aborts 


When a cycle initiated by the bridge is master/target aborted, the bridge will not re- 
attempt the same cycle. For multiple DW cycles, the bridge increments the address and 
attempts the next DW of the transaction. For all non-postable cycles, a target abort 
response packet is returned for each DW that was master or target aborted on PCI. The 
bridge drops posted writes that abort. 


Secondary Master Latency Timer 
The bridge implements a Master Latency Timer via the SMLT register which, upon 


expiration, causes the de-assertion of FRAME# at the next valid clock edge when there 
is another active request to use the PCI bus. 


Dual Address Cycle (DAC) 


The bridge will issue full 64-bit dual address cycles for device memory-mapped 
registers above 4 GB. 
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5.1.2.8 Memory and I|/ O Decode to PCI 


The PCI bridge in the |CH9 is a subtractive decode agent, which follows the following 
rules when forwarding a cycle from DMI to the PCI interface: 


The PCI bridge will positively decode any memory/IO address within its window 
registers, assuming PCICMD.MSE (D30:F0: Offset 04h: bit 1) is set for memory 
windows and PCICMD.IOSE (D30: FO: Offset 04h: bit 0) is set for 10 windows. 


The PCI bridge will subtractively decode any 64-bit memory address not claimed 
by another agent, assuming PCICMD.MSE (D30: FO: Offset 04h: bit 1) is set. 


The PCI bridge will subtractively decode any 16-bit |/O address not claimed by 
another agent assuming PCICMD.IOSE (D30: FO: Offset 04h: bit 0) is set. 


If BCTRL.IE (D30:FO0: Offset 3Eh: bit 2) is set, the PCI bridge will not positively 
forward from primary to secondary called out ranges in the |O window per PCI 
Local Bus Specification (I/O transactions addressing the last 768 bytes in each, 1 
KB block: offsets 100h to 3FFh). The PCI bridge will still take them subtractively 
assuming the above rules. 


If BCTRL.VGAE (D30: FO: Offset 3Eh:bit 3) is set, the PCI bridge will positively 
forward from primary to secondary I/O and memory ranges as called out in the PCI 
Bridge Specification, assuming the above rules are met. 


5.1.3 Parity Error Detection and Generation 


PCI parity errors can be detected and reported. The following behavioral rules apply: 


When a parity error is detected on PCI, the bridge sets the SECSTS.DPE 
(D30: FO: Offset 1Eh: bit 15). 


If the bridge is a master and BCTRL.PERE (D30: FO: Offset 3Eh: bit 0) is set and one 
of the parity errors defined below is detected on PCI, then the bridge will set 
SECSTS.DPD (D30:F0: Offset 1Eh: bit 8) and will also generate an internal SERR#. 


— During a write cycle, the PERR# signal is active, or 
— A data parity error is detected while performing a read cycle 


If an address or command parity error is detected on PCI and PCICMD.SEE 

(D30: FO: Offset 04h: bit 8), BCTRL.PERE, and BCTRL.SEE (D30:F0: Offset 3Eh: bit 1) 
are all set, the bridge will set PSTS.SSE (D30: FO: Offset 06h: bit 14) and generate 
an internal SERR#. 


If the PSTS.SSE is set because of an address parity error and the PCICMD.SEE is 
set, the bridge will generate an internal SERR# 


When bad parity is detected from DMI, bad parity will be driven on all data from the 
bridge. 


When an address parity error is detected on PCI, the PCI bridge will never claim the 
cycle. This is a slight deviation from the PCI bridge spec, which says that a cycle 
should be claimed if BCTRL.PERE is not set. However, DMI does not have a concept 
of address parity error, so claiming the cycle could result in the rest of the system 
seeing a bad transaction as a good transaction. 
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PCIRST# 


The PCIRST# pin is generated under two conditions: 
« PLTRST# active 
¢ BCTRL.SBR (D30: FO: Offset 3Eh: bit 6) set to 1 


The PCIRST# pin is in the suspend well. PCIRST# should be tied to PCI bus agents, but 
not other agents in the system. 


Peer Cycles 


The PCI bridge may be the initiator of peer cycles. Peer cycles include memory, |O, and 
configuration cycle types. Peer cycles are only allowed through VCO, and are enabled 
with the following bits: 


¢ BPC.PDE (D30:F0: Offset 4Ch: bit 2) - Memory and IO cycles 

e BPC.CDE (D30: FO: Offset 4Ch: bit 1) - Configuration cycles 
When enabled for peer for one of the above cycle types, the PCI bridge will perform a 
peer decode to see if a peer agent can receive the cycle. When not enabled, memory 


cycles (posted and/or non-posted) are sent to DMI, and I/O and/or configuration cycles 
are not claimed. 


Configuration cycles have special considerations. Under the PCI Local Bus Specification, 
these cycles are not allowed to be forwarded upstream through a bridge. However, to 
enable things such as manageability, BPC.CDE can be set. When set, type 1 cycles are 
allowed into the part. The address format of the type 1 cycle is slightly different from a 
standard PCI configuration cycle to allow addressing of extended PCI space. The format 
is as follows: 


Type 1 Address Format 


ee 
31:27 Reserved (same as the PCI Local Bus Specification) 


Extended Configuration Address - allows addressing of up to 
26:24 4K. These bits are combined with bits 7:2 to get the full 
register. 
23:16 Bus Number (same as the PCI Local Bus Specification 
15:11 Device Number (same as the PCI Local Bus Specification 


ification) 
ification) 


as | eee 
fo Must be 1 to indicate a type 1 cycle. Type 0 cycles are not 


decoded. 





The |CH9’s USB controllers cannot perform peer-to-peer traffic. 


PCI -to-PCI Bridge Model 


From a software perspective, the |CH9 contains a PCI-to-PCI bridge. This bridge 
connects DMI to the PCI bus. By using the PCI-to-PCI bridge software model, the |CH9 
can have its decode ranges programmed by existing plug-and-play software such that 
PCI ranges do not conflict with graphics aperture ranges in the Host controller. 
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IDSEL to Device Number Mapping 


When addressing devices on the external PCI bus (with the PCI slots), the |CH9 asserts 
one address signal as an IDSEL. When accessing device 0, the ICH9 asserts AD16. 
When accessing Device 1, the |CH9 asserts AD17. This mapping continues all the way 
up to device 15 where the |CH9 asserts AD31. Note that the ICH9’s internal functions 
(Intel® High Definition Audio, USB, SATA and PCI Bridge) are enumerated like they are 
off of a separate PCI bus (DMI) from the external PCI bus. 


Standard PCI Bus Configuration Mechanism 


The PCI Bus defines a slot based “configuration space” that allows each device to 
contain up to eight functions with each function containing up to 256, 8-bit 
configuration registers. The PCI Local Bus Specification, Revision 2.3 defines two bus 
cycles to access the PCI configuration space: Configuration Read and Configuration 
Write. Memory and I/O spaces are supported directly by the processor. Configuration 
space is supported by a mapping mechanism implemented within the |CH9. The PCI 
Local Bus Specification, Revision 2.3 defines two mechanisms to access configuration 
space, Mechanism 1 and Mechanism 2. The |CH9 only supports Mechanism 1. 


Configuration writes to internal devices, when the devices are disabled, are invalid and 
may cause undefined results. 


PCI Express* Root Ports (D28:FO,F1,F2,F3,F4,F5) 


There are six root ports available in |CH9. These all reside in device 28, and take 
function 0 - 5. Port 1 is function 0, port 2 is function 1, port 3 is function 2, port 4 is 
function 3, port 5 is function 4, and port 6 is function 5. 


PCI Express Root Ports 1-4 can be statically configured as four x1 Ports or ganged 
together to form one x4 port. Ports 5 and 6 can only be used as two x1 ports. On 
Mobile platforms, PCI Express Ports 1-4 can also be configured as one x2 port (using 
ports 1 and 2) with ports 3 and 4 configured as x1 ports. The port configuration is set 
by RCBA 224h [Bits 1:0] see Section 10.1.38 for more details. 


Interrupt Generation 


The root port generates interrupts on behalf of Hot-Plug and power management 
events, when enabled. These interrupts can either be pin based, or can be MSIs, when 
enabled. 


When an interrupt is generated via the legacy pin, the pin is internally routed to the 
ICH9 interrupt controllers. The pin that is driven is based upon the setting of the 
chipset configuration registers. Specifically, the chipset configuration registers used are 
the D28IP (Base address + 310Ch) and D28IR (Base address + 3146h) registers. 


The following table summarizes interrupt behavior for MSI and wire-modes. In the 
table “bits” refers to the Hot-Plug and PME interrupt bits. 
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MSI vs. PCI IRQ Actions 


‘ Wire-Mode 


All bits 0 No action 


One or more bits set to 1 send 
message 


One or more bits set to 1, software clears some (but not all) Wire active Send 
bits message 


One or more bits set to 1, software clears all bits Wire inactive No action 

Software clears one or more bits, and one or more bits are ‘ : Send 
Wire active 

set on the same clock message 


Power Management 





; . ‘ : Send 
One or more bits set to 1, new bit gets set to 1 


S3/ S4/ S5 Support 


Software initiates the transition to S3/S4/S5 by performing an 1O write to the Power 
Management Control register in the |CH9. After the 1O write completion has been 
returned to the processor, each root port will send a PME_Turn_Off TLP (Transaction 
Layer Packet) message on its downstream link. The device attached to the link will 
eventually respond with a PME_TO_Ack TLP message followed by sending a 
PM_Enter_L23 DLLP (Data Link Layer Packet) request to enter the L2/L3 Ready state. 
When all of the ICH9 root ports links are in the L2/L3 Ready state, the |CH9 power 
management control logic will proceed with the entry into $3/S4/S5. 


Prior to entering S3, software is required to put each device into D3yo7. When a device 
is put into D3yo7 it will initiate entry into a L1 link state by sending a PM_Enter_L1 
DLLP. Thus under normal operating conditions when the root ports sends the 
PME_Turn_Off message the link will be in state L1. However, when the root port is 
instructed to send the PME_Turn_Off message, it will send it whether or not the link 
was in L1. Endpoints attached to ICH can make no assumptions about the state of the 
link prior to receiving a PME_Turn_Off message. 


Resuming from Suspended State 


The root port contains enough circuitry in the suspend well to detect a wake event 
through the WAKE# signal and to wake the system. When WAKE# is detected asserted, 
an internal signal is sent to the power management controller of the |CH9 to cause the 
system to wake up. This internal message is not logged in any register, nor is an 
interrupt/GPE generated due to it. 


Device Initiated PM_PME Message 


When the system has returned to a working state from a previous low power state, a 
device requesting service will send a PM_PME message continuously, until acknowledge 
by the root port. The root port will take different actions depending upon whether this 
is the first PM_PME has been received, or whether a previous message has been 
received but not yet serviced by the operating system. 


If this is the first message received (RSTS.PS - D28:FO/F1/F2/F3/F4/F5: Offset 60h: bit 


16 is cleared), the root port will set RSTS.PS, and log the PME Requester ID into 
RSTS.RID (D28:FO/F1/F2/F3/F4/F5: Offset 60h: bits 15:0). If an interrupt is enabled via 
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Figure 5-1. 


RCTL.PIE (D28:FO/F1/F2/F3/F4/F5: Offset 5Ch: bit 3), an interrupt will be generated. 
This interrupt can be either a pin or an MSI if MSI is enabled via MC.MSIE (D28:FO/F1/ 
F2/F3/F4/F5: Offset 82h: bit 0). See Section 5.2.2.4 for SMI/SCI generation. 


If this is a Subsequent message received (RSTS.PS is already set), the root port will set 
RSTS.PP (D28:FO/F1/F2/F3/F4/F5: Offset 60h: bit 17) and log the PME Requester ID 
from the message in a hidden register. No other action will be taken. 


When the first PME event is cleared by software clearing RSTS.PS, the root port will set 
RSTS.PS, clear RSTS.PP, and move the requester ID from the hidden register into 
RSTS.RID. 


If RCTL.PIE is set, an interrupt will be generated. If RCTL.PIE is not set, a message will 
be sent to the power management controller so that a GPE can be set. If messages 
have been logged (RSTS.PS is set), and RCTL.PIE is later written from a 0 to a1, and 
interrupt will be generated. This last condition handles the case where the message 
was received prior to the operating system re-enabling interrupts after resuming from 
a low power state. 


SMI/ SCI Generation 


Interrupts for power management events are not supported on legacy operating 
systems. To support power management on non-PCl Express aware operating systems, 
PM events can be routed to generate SCI. To generate SCI, MPC.PMCE must be set. 
When set, a power management event will cause SMSCS.PMCS (D28:FO/F1/F2/F3/F4/ 
F5: Offset DCh: bit 31) to be set. 


Additionally, BLOS workarounds for power management can be supported by setting 
MPC.PMME (D28:FO/F1/F2/F3/F4/F5: Offset D8h: bit 0). When this bit is set, power 
management events will set SMSCS.PMMS (D28:FO/F1/F2/F3/F4/F5: Offset DCh: bit 0), 
and SMI # will be generated. This bit will be set regardless of whether interrupts or SCI 
is enabled. The SMI # may occur concurrently with an interrupt or SCI. 


SERR# Generation 


SERR# may be generated via two paths - through PCI mechanisms involving bits in the 
PCI header, or through PCI Express’ mechanisms involving bits in the PCI Express 
capability structure. 


Generation of SERR# to Platform 


Secondary Parity Error — xX PSTS.SSE 
Primary Parity Error | 


Secondary SERR# — 























PCICMD.SEE SP aes SERR# 


| Correctable SERR# — 


PCI Express Fatal SERR# — > > 


Non-Fatal SERR# — 
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Hot-Plug 


Each root port implements a Hot-Plug controller which performs the following: 
« Messages to turn on / off / blink LEDs 
« Presence and attention button detection 
¢ Interrupt generation 


The root port only allows Hot-Plug with modules (e.g., ExpressCard* ). Edge-connector 
based Hot-Plug is not supported. 


Presence Detection 


When a module is plugged in and power is supplied, the physical layer will detect the 
presence of the device, and the root port sets SLSTS.PDS (D28:FO/F1/F2/F3/F4/ 

F5: Offset 5Ah: bit 6) and SLSTS.PDC (D28:FO/F1/F2/F3: Offset 6h: bit 3). If SLCTL.PDE 
(D28:FO/F1/F2/F3F4/F5: Offset 58h: bit 3) and SLCTL.HPE (D28: FO/F1/F2/F3F4/ 

F5: Offset 58h: bit 5) are both set, the root port will also generate an interrupt. 


When a module is removed (via the physical layer detection), the root port clears 
SLSTS.PDS and sets SLSTS.PDC. If SLCTL.PDE and SLCTL.HPE are both set, the root 
port will also generate an interrupt. 


Message Generation 


When system software writes to SLCTL.AIC (D28: FO/F1/F2/F3F4/F5: Offset 58h: bits 
7:6) or SLCTL.PIC (D28:FO/F1/F2/F3F4/F5: Offset 58h: bits 9:8), the root port will send 
a message down the link to change the state of LEDs on the module. 


Writes to these fields are non-postable cycles, and the resulting message is a postable 
cycle. When receiving one of these writes, the root port performs the following: 


¢ Changes the state in the register. 
¢« Generates a completion into the upstream queue 


¢ Formulates a message for the downstream port if the field is written to regardless 
of if the field changed. 


¢« Generates the message on the downstream port 


e When the last message of a command is transmitted, sets SLSTS.CCE (D28:FO/F1/ 
F2/F3F4/F5: Offset 58h: bit 4) to indicate the command has completed. If 
SLCTL.CCE and SLCTL.HPE (D28:FO/F1/F2/F3F4/F5: Offset 58h: bit 5) are set, the 
root port generates an interrupt. 


The command completed register (SLSTS.CC) applies only to commands issued by 
software to control the Attention Indicator (SLCTL.AIC), Power Indicator (SLCTL.PIC), 
or Power Controller (SLCTL.PCC). However, writes to other parts of the Slot Control 
Register would invariably end up writing to the indicators, power controller fields; 
Hence, any write to the Slot Control Register is considered a command and if enabled, 
will result in a command complete interrupt. The only exception to this rule is a write to 
disable the command complete interrupt which will not result in a command complete 
interrupt. 


A single write to the Slot Control register is considered to be a single command, and 


hence receives a single command complete, even if the write affects more than one 
field in the Slot Control Register. 
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Attention Button Detection 


When an attached device is ejected, an attention button could be pressed by the user. 
This attention button press will result in the PCI Express message 

“Attention_Button_ Pressed” from the device. Upon receiving this message, the root 
port will set SLSTS.ABP (D28:FO/F1/F2/F3F4/F5: Offset 5Ah: bit 0). 


If SLCTL.ABE (D28: FO/F1/F2/F3F4/F5: Offset 58h: bit 0) and SLCTL.HPE (D28:FO/F1/F2/ 
F3F4/F5: Offset 58h: bit 5) are set, the Hot-Plug controller will also generate an 
interrupt. The interrupt is generated on an edge-event. For example, if SLSTS.ABP is 
already set, a new interrupt will not be generated. 


SMI/ SCI Generation 


Interrupts for Hot-Plug events are not supported on legacy operating systems. To 
support Hot-Plug on non-PCl Express aware operating systems, Hot-Plug events can be 
routed to generate SCI. To generate SCI, MPC.HPCE (D28:FO/F1/F2/F3F4/F5: Offset 
D8h: bit 30) must be set. When set, enabled Hot-Plug events will cause SMSCS.HPCS 
(D28:FO/F1/F2/F3F4/F5: Offset DCh: bit 30) to be set. 


Additionally, BLOS workarounds for Hot-Plug can be supported by setting MPC.HPME 
(D28:FO/F1/F2/F3F4/F5: Offset D8h: bit 1). When this bit is set, Hot-Plug events can 
cause SMI status bits in SMSCS to be set. Supported Hot-Plug events and their 
corresponding SMSCS bit are: 


* Command Completed - SCSCS.HPCCM (D28:FO/F1/F2/F3/F4/F5: Offset DCh: bit 3) 


e Presence Detect Changed - SMSCS.HPPDM (D28:F0O/F1/F2/F3/F4/F5: Offset DCh: bit 
1) 
Attention Button Pressed - SMSCS.HPABM (D28:FO/F1/F2/F3/F4/F5: Offset DCh: bit 
2) 


¢ Link Active State Changed - SMSCS.HPLAS (D28:FO/F1/F2/F3/F4/F5: Offset DCh: bit 
4) 


When any of these bits are set, SMI # will be generated. These bits are set regardless 
of whether interrupts or SCI is enabled for Hot-Plug events. The SMI# may occur 
concurrently with an interrupt or SCI. 


Gigabit Ethernet Controller (B0O:D25:FO) 


The ICH9 integrates a Gigabit Ethernet Controller. The integrated Gigabit Ethernet 
controller is compatible with Intel 10/100 PHY (Intel® 82562V Platform LAN Connect 
device) and Gigabit Ethernet PHY (Intel® 82566 Gigabit Platform LAN Connect device). 
The integrated Gigabit Ethernet controller provides two interfaces: LAN Connect 
Interface (LCI) for 10/100 operation and Gigabit LAN Connect Interface (GLCI) for 
Gigabit Ethernet operation. The GLCI is shared with the ICH9’s PCI Express port 6. 


The ICH9 integrated Gigabit Ethernet controller supports multi speed operation, 
10/100/1000 MB/s. The integrated Gigabit Ethernet can operate in full-duplex at all 
supported speeds or half-duplex at 10/100 MB/s, and adheres with the IEEE 802.3x 
Flow Control Specification. 


Gigabit Ethernet (1000Mb/s) is only supported in SO. 
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The controller provides a system interface via a PCI function. A full memory-mapped or 
|1O-mapped interface is provided to the software, along with DMA mechanisms for high 
performance data transfer. 


The following summarizes the ICH9 integrated Gigabit Ethernet controller features: 


¢ Configurable LED operation for customization of LED display. 
¢ | Pv4 and IPv6 Checksum Offload support (receive, transmit, and large send). 


* 64-bit address master support for system using more than 4 GB of physical 
memory. 


¢ Configurable receive and transmit data FIFO, programmable in 1 KB increments. 
« Intelligent interrupt generation to enhance driver performance. 


* Compliance with Advanced Configuration and Power Interface and PCI Power 
Management standards. 


¢ ACPI register set and power down functionality supporting DO & D3 states. 
¢ Full wake-up support (APM and ACPI). 

¢ Magic Packet wake-up enable with unique MAC address. 

« Fragmented UDP checksum off load for package reassembly. 

*« Jumbo frames supported. 


Gigabit Ethernet PCI Bus Interface 


The Gigabit Ethernet controller has a PCI interface to the host processor and host 
memory. The following sections detail the transaction on the bus. 


Transaction Layer 


The upper layer of the host architecture is the transaction layer. The transaction layer 
connects to the device core using an implementation specific protocol. Through this 
core-to-transaction-layer protocol, the application-specific parts of the device interact 
with the subsystem and transmit and receive requests to or from the remote agent, 
respectively. 


Data Alignment 


4 K Boundary 


PCI requests must never specify an Address/Length combination that causes a Memory 
Space access to cross a 4 K boundary. It is the HW responsibility to break requests into 
4 K-aligned requests (if needed). This does not pose any requirement on SW. However, 
if SW allocates a buffer across a 4 K boundary, HW will issue multiple requests for the 
buffer. SW should consider aligning buffers to 4 KB boundary in cases where it 
improves performance. 


The alignment to the 4 K boundaries is done in the core. The Transaction layer will not 
do any alignment according to these boundaries. 


64 Bytes 
PCI requests are multiples of 64 bytes and aligned to make better use of memory 


controller resources. Writes, however, can be on any boundary and can cross a 64 byte 
alignment boundary 
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Configuration Request Retry Status 


The LAN Controller might have a delay in initialization due to NVM read. If the NVM 
configuration read operation is not completed and the device receives a Configuration 
Request, the device will respond with a Configuration Request Retry Completion Status 
to terminate the Request, and thus effectively stall the Configuration Request until such 
time that the subsystem has completed local initialization and is ready to communicate 
with the host. 


Error Events and Error Reporting 


Data Parity Error 


The PCI Host bus does not provide parity protection, but it does forward parity errors 
from bridges. The LAN Controller recognizes parity errors through the internal bus 
interface and will set the Parity Error bit in PCI Configuration space. If parity errors are 
enabled in configuration space, a system error will be indicated on the PCI Host bus to 
the chipset. The offending cycle with a parity error will be dropped and not processed 
by the LAN Controller. 


Completion with Unsuccessful Completion Status 


A completion with unsuccessful completion status (any status other than "000") will be 
dropped and not processed by the LAN Controller. Furthermore, the request that 
corresponds to the unsuccessful completion will not be retried. When this unsuccessful 
completion status is received, the System Error bit in the PCI Configuration space will 
be set. If the system errors are enabled in configuration space, a system error will be 
indicated on the PCI Host bus to the chipset. 


Ethernet I nterface 


The integrated LAN controller provides a complete CSMA/CD function supporting IEEE 
802.3 (10Mb/s), 802.3u (100Mb/s) implementations. It also supports the IEEE 802.3z 
and 802.3ab (1000Mb/s) implementations. The device performs all of the functions 

required for transmission, reception and collision handling called out in the standards. 


The mode used to communicate between the LAN controller and the LAN connect 
device supports 10/100/1000 Mbps operation, with both half- and full-duplex operation 
at 10/100 Mbps, and full-duplex operation at 1000 Mbps. 


MAC/ LAN Connect I nterface 


The integrated LAN controller and LAN Connect Device communicate through either the 
platform LAN connect interface (LCI) or Gigabit LAN connect interface (GLCI). All 
controller configuration is performed using device control registers mapped into system 
memory or 1/O space. The LAN Connect Device is configured via the LCI or Gigabit 
Ethernet Lan connect interface. 


The integrated MAC supports various modes as summarized in the following table 


LAN Mode Support 


Legacy 10/100 LCl 82562 
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PCI Power Management 


The LAN Controller supports the Advanced Configuration and Power Interface (ACPI) 
specification as well as Advanced Power Management (APM). This allows the host to be 
awoken (i.e. from Sx (S3-S5) to SO) by network-related activity via an internal host 
wake signal. 


The LAN controller contains power management registers for PCI, and supports DO and 
D3 states. PCI transactions are only allowed in the DO state, except for host accesses 
to the LAN controller’s PCI configuration registers. 


Wake-Up 


The LAN Controller supports two types of wakeup mechanisms: 
1. Advanced Power Management (APM) Wakeup 
2. ACPI Power Management Wakeup 
Both mechanisms use an internal WAKE# signal to wake the system up. This signal is 
connected to the suspend wake logic in the |CH9. The wake-up steps are as follows: 
1. Host Wake Event occurs (note that packet is not delivered to host) 
PME_STATUS bit is set 
Internal WAKE# signal asserted by Host LAN function 
System wakes from Sx state to SO state 
The Host LAN function is transitioned to DO 
The Host clears the PME_STATUS bit 
Internal WAKE# signal is deasserted by Host LAN function 


So) OR wes 


Advanced Power Management Wakeup 


Advanced Power Management Wakeup, or APM Wakeup, was previously known as Wake 
on LAN. It is a feature that has existed in the 10/100 Mbps NICs for several 
generations. The basic premise is to receive a broadcast or unicast packet with an 
explicit data pattern, and then to assert a signal to wake-up the system. In the earlier 
generations, this was accomplished by using a special signal that ran across a cable to 
a defined connector on the motherboard. The NIC would assert the signal for 
approximately 50ms to signal a wakeup. The LAN Controller uses (if configured to) an 
in-band PM_PME message for this. 


On power-up, the LAN Controller will read the APM Enable bits from the NVM PCI Init 
Control Word into the APM Enable (APME) bits of the Wakeup Control Register (WUC). 
These bits control enabling of APM Wakeup. 


When APM Wakeup is enabled, the LAN Controller checks all incoming packets for Magic 
Packets. 
Once the LAN Controller receives a matching magic packet, it will: 
¢« Set the Magic Packet Received bit in the Wake Up Status Register (WUS). 
¢ Set the PME_Status bit in the Power Management Control / Status Register 
(PMCSR) and assert the internal WAKE# signal. 


APM Wakeup is supported in all power states and only disabled if a subsequent NVM 
read results in the APM Wake Up bit being cleared or the software explicitly writes a 0 
to the APM Wake Up (APM) bit of the WUC register. 
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ACPI Power Management Wakeup 


The LAN Controller supports ACP] Power Management based Wakeups. It can generate 
system wake-up events from three sources: 


* Reception of a Magic Packet. 
¢ Reception of a Network Wakeup Packet. 
¢ Detection of a link change of state. 


Activating ACPI Power Management Wakeup requires the following steps: 


¢ The driver programs the Wake Up Filter Control Register (WUFC) to indicate the 
packets it wishes to wake up from and supplies the necessary data to the Ipv4 
Address Table (IP4AT) and the Flexible Filter Mask Table (FFMT), Flexible Filter 
Length Table (FFLT), and the Flexible Filter Value Table (FFVT). It can also set the 
Link Status Change Wake Up Enable (LNKC) bit in the Wake Up Filter Control 
Register (WUFC) to cause wakeup when the link changes state. 


¢« The OS (at configuration time) writes a 1 to the PME_EN bit of the Power 
Management Control / Status Register (PMCSR.8). 


Normally, after enabling wakeup, the OS will write 11b to the lower two bits of the 
PMCSR to put the LAN Controller into low-power mode. 


Once Wakeup is enabled, the LAN Controller monitors incoming packets, first filtering 

them according to its standard address filtering method, then filtering them with all of 
the enabled wakeup filters. If a packet passes both the standard address filtering and 

at least one of the enabled wakeup filters, the LAN Controller will: 


e Set the PME_Status bit in the Power Management Control / Status Register 
(PMCSR) 


¢ If the PME_EN bit in the Power Management Control / Status Register (PMCSR) is 
set, assert the internal WAKE# signal. 


¢« Set one or more of the Received bits in the Wake Up Status Register (WUS). (More 
than one bit will be set if a packet matches more than one filter. ) 


If enabled, a link state change wakeup will cause similar results, setting PME_ Status, 
asserting the internal WAKE# signal and setting the Link Status Changed (LNKC) bit in 
the Wake Up Status Register (WUS) when the link goes up or down. 


The internal WAKE# signal will remain asserted until the OS either writes a 1 to the 
PME_ Status bit of the PMCSR register or writes a 0 to the PME_En bit. 


After receiving a wakeup packet, the LAN Controller will ignore any subsequent wakeup 
packets until the driver clears all of the Received bits in the Wake Up Status Register 
(WUS). It will also ignore link change events until the driver clears the Link Status 
Changed (LNKC) bit in the Wake Up Status Register (WUS). 


Configurable LEDs 


The LAN Controller supports 3 controllable and configurable LEDs that are driven from 
the LAN Connect Device. Each of the three LED outputs can be individually configured 
to select the particular event, state, or activity, which will be indicated on that output. 
In addition, each LED can be individually configured for output polarity as well as for 
blinking versus non-blinking (steady-state) indication. 


The configuration for LED outputs is specified via the LEDCTL register. Furthermore, the 
hardware-default configuration for all the LED outputs, can be specified via NVM fields, 
thereby supporting LED displays configurable to a particular OEM preference. 


Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 121 


| | ® 
| Nn tel ) Functional Description 


5.3.6 


5.3.6.1 


5.3.6.1.1 


5.3.6.1.2 


122 


Each of the 3 LED's may be configured to use one of a variety of sources for output 
indication. The MODE bits control the LED source: 


¢ LINK_100/1000 is asserted when link is established at either 100 or 1000Mbps. 
e« LINK_10/1000 is asserted when link is established at either 10 or 1000Mbps. 


¢ LINK_UP is asserted when any speed link is established and maintained. 
ACTIVITY is asserted when link is established and packets are being transmitted or 
received. 


¢ LINK/ACTIVITY is asserted when link is established AND there is NO transmit or 
receive activity 


¢ LINK_10 is asserted when a 10Mbps link is established and maintained. 
¢ LINK_100 is asserted when a 100Mbps link is established and maintained. 
e« LINK_1000 is asserted when a 1000Mbps link is established and maintained. 
e« FULL_DUPLEX is asserted when the link is configured for full duplex operation. 
* COLLISION is asserted when a collision is observed. 
¢ PAUSED is asserted when the device's transmitter is flow controlled. 
¢« LED_ON is always asserted; LED_OFF is always de-asserted. 
The IVRT bits allow the LED source to be inverted before being output or observed by 


the blink-control logic. LED outputs are assumed to normally be connected to the 
negative side (cathode) of an external LED. 


The BLINK bits control whether the LED should be blinked while the LED source is 
asserted, and the blinking frequency (either 200ms on and 200ms off or 83ms on and 
83ms off). The blink control may be especially useful for ensuring that certain events, 
such as ACTIVITY indication, cause LED transitions, which are sufficiently visible to a 
human eye. The same blinking rate is shared by all LEDs 


Function Level Reset Support (FLR) 


The Gigabit LAN Controller supports the Function Level Reset (FLR) capability. The FLR 
capability can be used in conjunction with Intel® Virtualization Technology. FLR allows 
an Operating System in a Virtual Machine to have complete control over a device, 
including its initialization, without interfering with the rest of the platform. The device 
provides a software interface that enables the Operating System to reset the whole 
device as if a PCI reset was asserted. 


FLR Steps 

FLR Initialization 

1) A FLR is initiated by software writing a ‘1’ to the Initiate FLR bit. 

2) All subsequent requests targeting the Function will not be claimed and will be Master 
Abort Immediate on the bus. This includes any configuration, |/O or Memory cycles, 
however, the Function shall continue to accept completions targeting the Function. 
FLR Operation 

Function will Reset all configuration, |/O and memory registers of the Function except 


those indicated otherwise and reset all internal states of the Function to the default or 
initial condition. 
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Figure 5-2. 


FLR Completion 


The Initiate FLR bit is reset (cleared) when the FLR reset is completed. This bit can be 
used to indicate to the software that the FLR reset is completed. 


Note: From the time Initiate FLR bit is written to '1' software must wait at least 100ms 
before accessing the function. 


LPC Bridge (w/ System and Management 
Functions) (D31:F0O) 


The LPC bridge function of the |CH9 resides in PCI Device 31:Function 0. In addition to 
the LPC bridge function, D31:FO contains other functional units including DMA, 
Interrupt controllers, Timers, Power Management, System Management, GPIO, and 
RTC. In this chapter, registers and functions associated with other functional units 
(power management, GPIO, USB, etc.) are described in their respective sections. 


The LPC bridge cannot be configured as a subtractive decode agent. 


LPC Interface 


The ICH9 implements an LPC interface as described in the Low Pin Count Interface 
Specification, Revision 1.1. The LPC interface to the |CH9 is shown in Figure 5-2. Note 
that the |CH9 implements all of the signals that are shown as optional, but peripherals 
are not required to do so. 


LPC Interface Diagram 





PCI 
SERIRQ 





LAD [3:0] 
LFRAME# 
LDRQ[1:0}# 


(Optional) LPC Device 
LPCPD# 
(Optional) 
LSMI# 
(Optional) 


Intel® ICH9 


SUS_STAT# 


GPI 
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Functional Description 


LPC Cycle Types 


The ICH9 implements all of the cycle types described in the Low Pin Count Interface 
Specification, Revision 1.0. Table 5-5 shows the cycle types supported by the ICH9. 


LPC Cycle Types Supported 


1 byte only. Intel® |CH9 breaks up 16- and 32-bit processor cycles into 
1/O Read : : 
multiple 8-bit transfers. 
: 1 byte only. |CH9 breaks up 16- and 32-bit processor cycles into multiple 
1/O Write : 
8-bit transfers. 


DMA Read Can be 1, or 2 bytes 
DMA Write Can be 1, or 2 bytes 


Bus Master Read Can be 1, 2, or 4 bytes. (See Note 1 below) 





Bus Master Write | Can be 1, 2, or 4 bytes. (See Note 1 below) 


NOTES: 

1. Bus Master Read or Write cycles must be naturally aligned. For example, a 1-byte transfer 
can be to any address. However, the 2-byte transfer must be word-aligned (i.e., with an 
address where AO=0). A dword transfer must be dword-aligned (i.e., with an address 
where Al and AO are both 0). 


Start Field Definition 


Start Field Bit Definitions 


Bits[3:0] Definition 
Encoding 


0000 Start of cycle for a generic target 


0010 Grant for bus master 0 
0011 Grant for bus master 1 


1111 Stop/Abort: End of a cycle for a 
target. 





NOTE: All other encodings are RESERVED. 
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5.4.1.3 Cycle Type / Direction (CYCTYPE + DIR) 


The ICH9 always drives bit 0 of this field to 0. Peripherals running bus master cycles 
must also drive bit 0 to 0. Table 5-7 shows the valid bit encodings. 


Table 5-7. Cycle Type Bit Definitions 


ferseant em [ao 


1 F Reserved. If a peripheral performing a bus master cycle generates this 
value, the Intel® 1CH9 aborts the cycle. 


5.4.1.4 Size 





Bits[3:2] are reserved. The |CH9 always drives them to 00. Peripherals running bus 
master cycles are also supposed to drive 00 for bits 3:2; however, the |CH9 ignores 
those bits. Bits[1:0] are encoded as listed in Table 5-8. 


Table 5-8. Transfer Size Bit Definition 


| 00 8-bit transfer (1 byte) 
16-bit transfer (2 bytes) 


Reserved. The Intel® 1CH9 never drives this combination. If a peripheral running 
a bus master cycle drives this combination, the |CH9 may abort the transfer. 


32-bit transfer (4 bytes) 
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5.4.1.5 SYNC 
Valid values for the SYNC field are shown in Table 5-9. 


Table 5-9. SYNC Bit Definition 


Ready: SYNC achieved with no error. For DMA transfers, this also indicates DMA 
0000 : . 

request deassertion and no more transfers desired for that channel. 

Short Wait: Part indicating wait-states. For bus master cycles, the Intel® 1CH9 
0101 does not use this encoding. Instead, the |CH9 uses the Long Wait encoding (see 

next encoding below). 

Long Wait: Part indicating wait-states, and many wait-states will be added. This 
0110 encoding driven by the |CH9 for bus master cycles, rather than the Short Wait 


(0101). 


cycle. 


Error: Sync achieved with error. This is generally used to replace the SERR# or 

IOCHK# signal on the PCI/ISA bus. It indicates that the data is to be transferred, 
1010 but there is a serious error in this transfer. For DMA transfers, this not only 

indicates an error, but also indicates DMA request deassertion and no more 


transfers desired for that channel. 


Ready More (Used only by peripheral for DMA cycle): SYNC achieved with 
1001 no error and more DMA transfers desired to continue after this transfer. This 
value is valid only on DMA transfers and is not allowed for any other type of 





NOTES: 

1. All other combinations are RESERVED. 

2. If the LPC controller receives any SYNC returned from the device other than short (0101), 
long wait (0110), or ready (0000) when running a FWH cycle, indeterminate results may 
occur. A FWH device is not allowed to assert an Error SYNC. 


5.4.1.6 SYNC Time-Out 
There are several error cases that can occur on the LPC interface. The ICH9 responds 
as defined in section 4.2.1.9 of the Low Pin Count Interface Specification, Revision 1.1 


to the stimuli described therein. There may be other peripheral failure conditions; 
however, these are not handled by the |CH9. 


5.4.1.7 SYNC Error I ndication 


The ICH9 responds as defined in section 4.2.1.10 of the Low Pin Count Interface 
Specification, Revision 1.1. 


Upon recognizing the SYNC field indicating an error, the |CH9 treats this as an SERR by 
reporting this into the Device 31 Error Reporting Logic. 
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Note: 


5.4.1.10 


Note: 


5.4.1.11 


Note: 


LFRAME# Usage 


The ICH9 follows the usage of LFRAME# as defined in the Low Pin Count Interface 
Specification, Revision 1.1. 


The |CH9 performs an abort for the following cases (possible failure cases): 


¢« ICH9 starts a Memory, I/O, or DMA cycle, but no device drives a valid SYNC after 
four consecutive clocks. 


¢« ICH9 starts a Memory, I/O, or DMA cycle, and the peripheral drives an invalid SYNC 
pattern. 


¢ A peripheral drives an invalid address when performing bus master cycles. 
¢ A peripheral drives an invalid value. 


I/O Cycles 


For |/O cycles targeting registers specified in the |CH9’s decode ranges, the |CH9 
performs I/O cycles as defined in the Low Pin Count Interface Specification, Revision 
1.1. These are 8-bit transfers. If the processor attempts a 16-bit or 32-bit transfer, the 
ICH9 breaks the cycle up into multiple 8-bit transfers to consecutive I/O addresses. 


If the cycle is not claimed by any peripheral (and subsequently aborted), the |CH9 
returns a value of all 1s (FFh) to the processor. This is to maintain compatibility with 
ISA I/O cycles where pull-up resistors would keep the bus high if no device responds. 


Bus Master Cycles 


The ICH9 supports Bus Master cycles and requests (using LDRQ#) as defined in the 
Low Pin Count Interface Specification, Revision 1.1. The |CH9 has two LDRQ# inputs, 
and thus supports two separate bus master devices. It uses the associated START fields 
for Bus Master 0 (0010b) or Bus Master 1 (0011b). 


The ICH9 does not support LPC Bus Masters performing I/O cycles. LPC Bus Masters 
should only perform memory read or memory write cycles. 


LPC Power Management 


CLKRUN# Protocol (Mobile Only) 


The CLKRUN# protocol is same as the PCI Local Bus Specification. Stopping the PCI 
clock stops the LPC clock. 


LPCPD# Protocol 


Same timings as for SUS_STAT#. Upon driving SUS_STAT# low, LPC peripherals drive 
LDRQ# low or tri-state it. |CH9 shuts off the LDRQ# input buffers. After driving 
SUS_STAT# active, the ICH9 drives LFRAME# low, and tri-states (or drive low) 
LAD[3:0]. 


The Low Pin Count Interface Specification, Revision 1.1 defines the LPCPD# protocol 
where there is at least 30 us from LPCPD# assertion to LRST# assertion. This 
specification explicitly states that this protocol only applies to entry/exit of low power 
states which does not include asynchronous reset events. The |CH9 asserts both 
SUS_STAT# (connects to LPCPD#) and PLTRST# (connects to LRST#) at the same time 
when the core logic is reset (via CF9h, PWROK, or SYS_RESET#, etc.). This is not 
inconsistent with the LPC LPCPD# protocol. 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 127 


| | ® 
| Nn tel ) Functional Description 


5.4.1.12 


Note: 


5.5 


Figure 5-3. 
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Configuration and Intel® 1CH9 Implications 


LPC I/ F Decoders 


To allow the |1/O cycles and memory mapped cycles to go to the LPC interface, the |CH9 
includes several decoders. During configuration, the |CH9 must be programmed with 
the same decode ranges as the peripheral. The decoders are programmed via the 
Device 31:Function 0 configuration space. 


The ICH9 cannot accept PCI write cycles from PCI-to-PCl bridges or devices with 
similar characteristics (specifically those with a “Retry Read” feature which is enabled) 
to an LPC device if there is an outstanding LPC read cycle towards the same PCI device 
or bridge. These cycles are not part of normal system operation, but may be 
encountered as part of platform validation testing using custom test fixtures. 


Bus Master Device Mapping and START Fields 


Bus Masters must have a unique START field. In the case of the |CH9 that supports two 
LPC bus masters, it drives 0010 for the START field for grants to bus master #0 
(requested via LDRQO#) and 0011 for grants to bus master #1 (requested via 
LDRQ1#.). Thus, no registers are needed to configure the START fields for a particular 
bus master. 


DMA Operation (D31:F0O) 


The ICH9 supports LPC DMA using the |CH9’s DMA controller. The DMA controller has 
registers that are fixed in the lower 64 KB of I/O space. The DMA controller is 
configured using registers in the PCI configuration space. These registers allow 
configuration of the channels for use by LPC DMA. 


The DMA circuitry incorporates the functionality of two 82C37 DMA controllers with 
seven independently programmable channels (Figure 5-3). DMA controller 1 (DMA-1) 
corresponds to DMA channels 0-3 and DMA controller 2 (DMA-2) corresponds to 
channels 5-7. DMA channel 4 is used to cascade the two controllers and defaults to 
cascade mode in the DMA Channel Mode (DCM) Register. Channel 4 is not available for 
any other purpose. In addition to accepting requests from DMA slaves, the DMA 
controller also responds to requests that software initiates. Software may initiate a 
DMA service request by setting any bit in the DMA Channel Request Register to a 1. 


Intel® 1CH9 DMA Controller 


Channel 0 Channel 4 


Channel 1 Channel 


Channel Channel 


Channel Channel 7- 





Each DMA channel is hardwired to the compatible settings for DMA device size: 
channels [3:0] are hardwired to 8-bit, count-by-bytes transfers, and channels [7:5] are 
hardwired to 16-bit, count-by-words (address shifted) transfers. 


ICH9 provides 24-bit addressing in compliance with the |SA-Compatible specification. 
Each channel includes a 16-bit |SA-Compatible Current Register which holds the 16 
least-significant bits of the 24-bit address, an |SA-Compatible Page Register which 
contains the eight next most significant bits of address. 
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5.5.1 


5.5.1.1 


5.5.1.2 


5.5.2 


The DMA controller also features refresh address generation, and auto-initialization 
following a DMA termination. 


Channel Priority 


For priority resolution, the DMA consists of two logical channel groups: channels 0-3 
and channels 4-7. Each group may be in either fixed or rotate mode, as determined by 
the DMA Command Register. 


DMA I/O slaves normally assert their DREQ line to arbitrate for DMA service. However, 
a software request for DMA service can be presented through each channel's DMA 
Request Register. A software request is subject to the same prioritization as any 
hardware request. See the detailed register description for Request Register 
programming information in Section 13.2. 


Fixed Priority 


The initial fixed priority structure is as follows: 





The fixed priority ordering is 0, 1, 2, 3, 5, 6, and 7. In this scheme, channel 0 has the 
highest priority, and channel 7 has the lowest priority. Channels [3:0] of DMA-1 assume 
the priority position of channel 4 in DMA-2, thus taking priority over channels 5, 6, and 
7. 


Rotating Priority 


Rotation allows for “fairness” in priority resolution. The priority chain rotates so that the 
last channel serviced is assigned the lowest priority in the channel group (0-3, 5-7). 


Channels 0-3 rotate as a group of 4. They are always placed between channel 5 and 
channel 7 in the priority list. 


Channel 5-7 rotate as part of a group of 4. That is, channels (5-7) form the first three 
positions in the rotation, while channel group (0-3) comprises the fourth position in the 
arbitration. 


Address Compatibility Mode 


When the DMA is operating, the addresses do not increment or decrement through the 
High and Low Page Registers. Therefore, if a 24-bit address is O1FFFFh and increments, 
the next address is 010000h, not 020000h. Similarly, if a 24-bit address is 0O20000h 
and decrements, the next address is O2FFFFh, not OLFFFFh. However, when the DMA is 
operating in 16-bit mode, the addresses still do not increment or decrement through 
the High and Low Page Registers but the page boundary is now 128 K. Therefore, if a 
24-bit address is O1FFFEh and increments, the next address is 000000h, not 
0100000h. Similarly, if a 24-bit address is O20000h and decrements, the next address 
is O3FFFEh, not O2FFFEh. This is compatible with the 82C37 and Page Register 
implementation used in the PC-AT. This mode is set after CPURST is valid. 
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Summary of DMA Transfer Sizes 


Table 5-10 lists each of the DMA device transfer sizes. The column labeled “Current 
Byte/Word Count Register” indicates that the register contents represents either the 
number of bytes to transfer or the number of 16-bit words to transfer. The column 
labeled “Current Address Increment/Decrement” indicates the number added to or 
taken from the Current Address register after each DMA transfer cycle. The DMA 
Channel Mode Register determines if the Current Address Register will be incremented 
or decremented. 


Address Shifting When Programmed for 16-Bit |/ O Count by Words 


DMA Transfer Size 


Current Address 
Increment/ 
Decrement 


16-Bit 1/0, Count By Words (Address 
Shifted) 


The ICH9 maintains compatibility with the implementation of the DMA in the PC AT that 
used the 82C37. The DMA shifts the addresses for transfers to/from a 16-bit device 
count- by-words. 


Current Byte/ Word 
Count Register 


DMA Device Date Size And Word Count 


The least significant bit of the Low Page Register is dropped in 16-bit shifted mode. 
When programming the Current Address Register (when the DMA channel is in this 
mode), the Current Address must be programmed to an even address with the address 
value shifted right by one bit. 


The address shifting is shown in Table 5-11. 


Address Shifting in 16-Bit 1/O DMA Transfers 


16-Bit |/ O Programmed 
Address (Ch 5-7) 
(Shifted) 


Output 8-Bit |/ O Programmed 
Address Address (Ch 0- 3) 


0 
A[15:0] 
A[23:17] 


NOTE: The least significant bit of the Page Register is dropped in 16-bit shifted mode. 


Autoinitialize 


By programming a bit in the DMA Channel Mode Register, a channel may be set up as 
an autoinitialize channel. When a channel undergoes autoinitialization, the original 
values of the Current Page, Current Address and Current Byte/Word Count Registers 
are automatically restored from the Base Page, Address, and Byte/Word Count 
Registers of that channel following TC. The Base Registers are loaded simultaneously 
with the Current Registers by the microprocessor when the DMA channel is 
programmed and remain unchanged throughout the DMA service. The mask bit is not 
set when the channel is in autoinitialize. Following autoinitialize, the channel is ready to 
perform another DMA service, without processor intervention, as soon as a valid DREQ 
is detected. 
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5.6.1 


Software Commands 


There are three additional special software commands that the DMA controller can 
execute. The three software commands are: 


¢ Clear Byte Pointer Flip-Flop 
« Master Clear 
¢« Clear Mask Register 


They do not depend on any specific bit pattern on the data bus. 


LPC DMA 


DMA on LPC is handled through the use of the LDRQ# lines from peripherals and 
special encodings on LAD[3:0] from the host. Single, Demand, Verify, and Increment 
modes are supported on the LPC interface. Channels 0-3 are 8 bit channels. Channels 
5-7 are 16-bit channels. 

Channel 4 is reserved as a generic bus master request. 


Asserting DMA Requests 


Peripherals that need DMA service encode their requested channel number on the 
LDRQ# signal. To simplify the protocol, each peripheral on the LPC I/F has its own 
dedicated LDRQ# signal (they may not be shared between two separate peripherals). 
The ICH9 has two LDRQ# inputs, allowing at least two devices to support DMA or bus 
mastering. 


LDRQ# is synchronous with LCLK (PCI clock). As shown in Figure 5-4, the peripheral 
uses the following serial encoding sequence: 


¢ Peripheral starts the sequence by asserting LDRQ# low (start bit). LDRQ# is high 
during idle conditions. 


¢ The next three bits contain the encoded DMA channel number (MSB first). 


¢ The next bit (ACT) indicates whether the request for the indicated DMA channel is 
active or inactive. The ACT bit is 1 (high) to indicate if it is active and 0 (low) if it is 
inactive. The case where ACT is low is rare, and is only used to indicate that a 
previous request for that channel is being abandoned. 


¢ After the active/inactive indication, the LDRQ# signal must go high for at least 1 
clock. After that one clock, LDRQ# signal can be brought low to the next encoding 
sequence. 


If another DMA channel also needs to request a transfer, another sequence can be sent 
on LDRQ#. For example, if an encoded request is sent for channel 2, and then channel 
3 needs a transfer before the cycle for channel 2 is run on the interface, the peripheral 
can send the encoded request for channel 3. This allows multiple DMA agents behind an 
1/O device to request use of the LPC interface, and the |/O device does not need to self- 
arbitrate before sending the message. 
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Figure 5-4. DMA Request Assertion through LDRQ# 


5.6.2 
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Abandoning DMA Requests 





DMA Requests can be deasserted in two fashions: on error conditions by sending an 
LDRQ# message with the ‘ACT’ bit set to 0, or normally through a SYNC field during the 
DMA transfer. This section describes boundary conditions where the DMA request needs 
to be removed prior to a data transfer. 


There may be some special cases where the peripheral desires to abandon a DMA 
transfer. The most likely case of this occurring is due to a floppy disk controller which 
has overrun or underrun its FIFO, or software stopping a device prematurely. 


In these cases, the peripheral wishes to stop further DMA activity. It may do so by 
sending an LDRQ# message with the ACT bit as 0. However, since the DMA request was 
seen by the |CH9, there is no assurance that the cycle has not been granted and will 
shortly run on LPC. Therefore, peripherals must take into account that a DMA cycle may 
still occur. The peripheral can choose not to respond to this cycle, in which case the 
host will abort it, or it can choose to complete the cycle normally with any random data. 


This method of DMA deassertion should be prevented whenever possible, to limit 
boundary conditions both on the ICH9 and the peripheral. 


General Flow of DMA Transfers 


Arbitration for DMA channels is performed through the 8237 within the host. Once the 
host has won arbitration on behalf of a DMA channel assigned to LPC, it asserts 
LFRAME# on the LPC I/F and begins the DMA transfer. The general flow for a basic DMA 
transfer is as follows: 


1. ICH9 starts transfer by asserting 0000b on LAD[3:0] with LFRAME# asserted. 
. |CH9 asserts ‘cycle type’ of DMA, direction based on DMA transfer direction. 
. ICH9 asserts channel number and, if applicable, terminal count. 
. ICH9 indicates the size of the transfer: 8 or 16 bits. 
. If a DMA read... 
— The ICH9 drives the first 8 bits of data and turns the bus around. 
— The peripheral acknowledges the data with a valid SYNC. 
— If a 16-bit transfer, the process is repeated for the next 8 bits. 
6. If a DMA write... 
— The ICH9 turns the bus around and waits for data. 
— The peripheral indicates data ready through SYNC and transfers the first byte. 


— If a 16-bit transfer, the peripheral indicates data ready and transfers the next 
byte. 


7. The peripheral turns around the bus. 


uu BW N 
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5.6.4 


5.6.5 


5.6.6 


Terminal Count 


Terminal count is communicated through LAD[3] on the same clock that DMA channel is 
communicated on LAD[2:0]. This field is the CHANNEL field. Terminal count indicates 
the last byte of transfer, based upon the size of the transfer. 


For example, on an 8-bit transfer size (SIZE field is OOb), if the TC bit is set, then this is 
the last byte. On a 16-bit transfer (SIZE field is 01b), if the TC bit is set, then the 
second byte is the last byte. The peripheral, therefore, must internalize the TC bit when 
the CHANNEL field is communicated, and only signal TC when the last byte of that 
transfer size has been transferred. 


Verify Mode 


Verify mode is supported on the LPC interface. A verify transfer to the peripheral is 
similar to a DMA write, where the peripheral is transferring data to main memory. The 
indication from the host is the same as a DMA write, so the peripheral will be driving 
data onto the LPC interface. However, the host will not transfer this data into main 
memory. 


DMA Request Deassertion 


An end of transfer is communicated to the |CH9 through a special SYNC field 
transmitted by the peripheral. An LPC device must not attempt to signal the end of a 
transfer by deasserting LDREQ#. If a DMA transfer is several bytes (e.g., a transfer 
from a demand mode device) the |CH9 needs to know when to deassert the DMA 
request based on the data currently being transferred. 


The DMA agent uses a SYNC encoding on each byte of data being transferred, which 
indicates to the I|CH9 whether this is the last byte of transfer or if more bytes are 
requested. To indicate the last byte of transfer, the peripheral uses a SYNC value of 
0000b (ready with no error), or 1010b 

(ready with error). These encodings tell the ICH9 that this is the last piece of data 
transferred on a DMA read (ICH9 to peripheral), or the byte that follows is the last 
piece of data transferred on a DMA write (peripheral to |CH9). 


When the ICH9 sees one of these two encodings, it ends the DMA transfer after this 
byte and deasserts the DMA request to the 8237. Therefore, if the |CH9 indicated a 16- 
bit transfer, the peripheral can end the transfer after one byte by indicating a SYNC 
value of 0000b or 1010b. The ICH9 does not attempt to transfer the second byte, and 
deasserts the DMA request internally. 


If the peripheral indicates a 0000b or 1010b SYNC pattern on the last byte of the 
indicated size, then the |CH9 only deasserts the DMA request to the 8237 since it does 
not need to end the transfer. 


If the peripheral wishes to keep the DMA request active, then it uses a SYNC value of 
1001b (ready plus more data). This tells the 8237 that more data bytes are requested 
after the current byte has been transferred, so the |CH9 keeps the DMA request active 
to the 8237. Therefore, on an 8-bit transfer size, if the peripheral indicates a SYNC 
value of 1001b to the ICH9, the data will be transferred and the DMA request will 
remain active to the 8237. At a later time, the |CH9 will then come back with another 
START- CYCTYPE- CHANNEL-SIZE etc. combination to initiate another transfer to the 
peripheral. 
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Functional Description 


The peripheral must not assume that the next START indication from the ICH9 is 
another grant to the peripheral if it had indicated a SYNC value of 1001b. On a single 
mode DMA device, the 8237 will re-arbitrate after every transfer. Only demand mode 
DMA devices can be assured that they will receive the next START indication from the 
ICH9. 


Indicating a 0000b or 1010b encoding on the SYNC field of an odd byte of a 16-bit 
channel (first byte of a 16-bit transfer) is an error condition. 


The host stops the transfer on the LPC bus as indicated, fills the upper byte with 
random data on DMA writes (peripheral to memory), and indicates to the 8237 that the 
DMA transfer occurred, incrementing the 8237's address and decrementing its byte 
count. 


SYNC Field / LDRQ# Rules 


Since DMA transfers on LPC are requested through an LDRQ# assertion message, and 
are ended through a SYNC field during the DMA transfer, the peripheral must obey the 
following rule when initiating back-to-back transfers from a DMA channel. 


The peripheral must not assert another message for eight LCLKs after a deassertion is 
indicated through the SYNC field. This is needed to allow the 8237, that typically runs 
off a much slower internal clock, to see a message deasserted before it is re-asserted 
so that it can arbitrate to the next agent. 


Under default operation, the host only performs 8-bit transfers on 8-bit channels and 
16-bit transfers on 16-bit channels. 


The method by which this communication between host and peripheral through system 
BIOS is performed is beyond the scope of this specification. Since the LPC host and LPC 
peripheral are motherboard devices, no “plug-n-play” registry is required. 


The peripheral must not assume that the host is able to perform transfer sizes that are 
larger than the size allowed for the DMA channel, and be willing to accept a SIZE field 
that is smaller than what it may currently have buffered. 


To that end, it is recommended that future devices that may appear on the LPC bus, 


that require higher bandwidth than 8-bit or 16-bit DMA allow, do so with a bus 
mastering interface and not rely on the 8237. 
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5.7.1 


8254 Timers (D31:F0) 


The ICH9 contains three counters that have fixed uses. All registers and functions 
associated with the 8254 timers are in the core well. The 8254 unit is clocked by a 
14.31818 MHz clock. 


Counter 0, System Timer 


This counter functions as the system timer by controlling the state of IRQO and is 
typically programmed for Mode 3 operation. The counter produces a square wave with 
a period equal to the product of the counter period (838 ns) and the initial count value. 
The counter loads the initial count value 1 counter period after software writes the 
count value to the counter I/O address. The counter initially asserts IRQO and 
decrements the count value by two each counter period. The counter negates |RQO 
when the count value reaches 0. It then reloads the initial count value and again 
decrements the initial count value by two each counter period. The counter then 
asserts IRQO when the count value reaches 0, reloads the initial count value, and 
repeats the cycle, alternately asserting and negating IRQO. 


Counter 1, Refresh Request Signal 


This counter provides the refresh request signal and is typically programmed for Mode 
2 operation and only impacts the period of the REF_TOGGLE bit in Port 61. The initial 
count value is loaded one counter period after being written to the counter I/O address. 
The REF_TOGGLE bit will have a square wave behavior (alternate between 0 and 1) and 
will toggle at a rate based on the value in the counter. Programming the counter to 
anything other than Mode 2 will result in undefined behavior for the REF_TOGGLE bit. 


Counter 2, Speaker Tone 


This counter provides the speaker tone and is typically programmed for Mode 3 
operation. The counter provides a speaker frequency equal to the counter clock 
frequency (1.193 MHz) divided by the initial count value. The speaker must be enabled 
by a write to port 061h (see NMI Status and Control ports). 


Timer Programming 


The counter/timers are programmed in the following fashion: 
1. Write a control word to select a counter. 
2. Write an initial count for that counter. 


3. Load the least and/or most significant bytes (as required by Control Word bits 5, 4) 
of the 
16-bit counter. 


4. Repeat with other counters. 


Only two conventions need to be observed when programming the counters. First, for 
each counter, the control word must be written before the initial count is written. 
Second, the initial count must follow the count format specified in the control word 
(least significant byte only, most significant byte only, or least significant byte and then 
most significant byte). 


A new initial count may be written to a counter at any time without affecting the 
counter's programmed mode. Counting is affected as described in the mode definitions. 
The new count must follow the programmed count format. 
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Functional Description 


If a counter is programmed to read/write two-byte counts, the following precaution 
applies: A program must not transfer control between writing the first and second byte 
to another routine which also writes into that same counter. Otherwise, the counter will 
be loaded with an incorrect count. 


The Control Word Register at port 43h controls the operation of all three counters. 
Several commands are available: 


¢ Control Word Command. Specifies which counter to read or write, the operating 
mode, and the count format (binary or BCD). 


¢ Counter Latch Command. Latches the current count so that it can be read by the 
system. The countdown process continues. 


« Read Back Command. Reads the count value, programmed mode, the current 
state of the OUT pins, and the state of the Null Count Flag of the selected counter. 


Table 5-12 lists the six operating modes for the interval counters. 


Counter Operating Modes 
a a ee 
Out signal on end of count (=0) Output is 0. When count goes to 0, output goes to 
1 and stays at 1 until counter is reprogrammed. 
: Output is 0. When count goes to 0, output goes to 
Hardware retriggerable one-shot 1 forone clack time. 
Rate generator (divide by n Output is 1. Output goes to 0 for one clock time, 
counter) then back to 1 and counter is reloaded. 


over, and counter is reloaded. Output goes to 1 
when counter rolls over, and counter is reloaded, 
etc. 


Software triggered strobe Output is 1. Output goes to 0 when count expires 
for one clock time. 

Hardware triggered strobe Output is 1. Output goes to 0 when count expires 
for one clock time. 


Reading from the I nterval Timer 


Square wave output 





Output is 1. Output goes to 0 when counter rolls 
3 


It is often desirable to read the value of a counter without disturbing the count in 
progress. There are three methods for reading the counters: a simple read operation, 
counter Latch command, and the Read-Back command. Each is explained below. 


With the simple read and counter latch command methods, the count must be read 
according to the programmed format; specifically, if the counter is programmed for two 
byte counts, two bytes must be read. The two bytes do not have to be read one right 
after the other. Read, write, or programming operations for other counters may be 
inserted between them. 


Simple Read 


The first method is to perform a simple read operation. The counter is selected through 
port 40h (counter 0), 41h (counter 1), or 42h (counter 2). 


Performing a direct read from the counter does not return a determinate value, 


because the counting process is asynchronous to read operations. However, in the case 
of counter 2, the count can be stopped by writing to the GATE bit in port 61h. 
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Counter Latch Command 


The Counter Latch command, written to port 43h, latches the count of a specific 
counter at the time the command is received. This command is used to ensure that the 
count read from the counter is accurate, particularly when reading a two-byte count. 
The count value is then read from each counter’s Count register as was programmed by 
the Control register. 


The count is held in the latch until it is read or the counter is reprogrammed. The count 
is then unlatched. This allows reading the contents of the counters on the fly without 
affecting counting in progress. Multiple Counter Latch Commands may be used to latch 
more than one counter. Counter Latch commands do not affect the programmed mode 
of the counter in any way. 


If a Counter is latched and then, some time later, latched again before the count is 
read, the second Counter Latch command is ignored. The count read is the count at the 
time the first Counter Latch command was issued. 


Read Back Command 


The Read Back command, written to port 43h, latches the count value, programmed 
mode, and current states of the OUT pin and Null Count flag of the selected counter or 
counters. The value of the counter and its status may then be read by I/O access to the 
counter address. 


The Read Back command may be used to latch multiple counter outputs at one time. 
This single command is functionally equivalent to several counter latch commands, one 
for each counter latched. Each counter's latched count is held until it is read or 
reprogrammed. Once read, a counter is unlatched. The other counters remain latched 
until they are read. If multiple count Read Back commands are issued to the same 
counter without reading the count, all but the first are ignored. 


The Read Back command may additionally be used to latch status information of 
selected counters. The status of a counter is accessed by a read from that counter's |/ 
O port address. If multiple counter status latch operations are performed without 
reading the status, all but the first are ignored. 


Both count and status of the selected counters may be latched simultaneously. This is 
functionally the same as issuing two consecutive, separate Read Back commands. If 
multiple count and/or status Read Back commands are issued to the same counters 
without any intervening reads, all but the first are ignored. 


If both count and status of a counter are latched, the first read operation from that 
counter returns the latched status, regardless of which was latched first. The next one 
or two reads, depending on whether the counter is programmed for one or two type 
counts, returns the latched count. Subsequent reads return unlatched count. 
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8259 Interrupt Controllers (PIC) (D31:FO) 


The ICH9 incorporates the functionality of two 8259 interrupt controllers that provide 
system interrupts for the ISA compatible interrupts. These interrupts are: system 
timer, keyboard controller, serial ports, parallel ports, floppy disk, mouse, and DMA 
channels. In addition, this interrupt controller can support the PCI based interrupts, by 
mapping the PCI interrupt onto the compatible ISA interrupt line. Each 8259 core 
supports eight interrupts, numbered 0-7. Table 5-13 shows how the cores are 
connected. 


Interrupt Controller Core Connections 


S228 Typleat (nkeccupe Connected Pin / Function 
Input Source 


2 
3 
4 
5 


1 
Master 

7 
1 IRQQ via SERIRQ, SCI, TCO, or PIRQ# 
2 IRQ1O via SERIRQ, SCI, TCO, or PIRQ# 


" IRQ11 via SERIRQ, SCI, TCO, or PIRQ#, or HPET 
diaye 4 PS/2 Mouse ye via SERIRQ, SCI, TCO, or PLIRQ#, or HPET 
State Machine output based on processor FERR# 
5 Internal assertion. May optionally be used for SCI or TCO 
interrupt if FERR# not needed. 
SATA Primary (legacy mode), or via SERIRQ or 
SATA PIRQ# 

SATA ret eat (legacy mode) or via SERIRQ or 


The ICH9 cascades the slave controller onto the master controller through master 
controller interrupt input 2. This means there are only 15 possible interrupts for the 
ICH9 PIC. 


ed 
Lo 
2 
a 
=—- 
ed 
Eee ed 
eZ 
LS eee Internal RTC / HPET #1 
Lae 
oe 


Interrupts can individually be programmed to be edge or level, except for IRQO, IRQ2, 
IRQ8#, and IRQ13. 


Active-low interrupt sources (e.g., the PIRQ#s) are inverted inside the ICH9. In the 
following descriptions of the 8259s, the interrupt levels are in reference to the signals 
at the internal interface of the 8259s, after the required inversions have occurred. 
Therefore, the term “high” indicates “active,” which means “low” on an originating 
PIRQ#. 
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5.8.1 Interrupt Handling 


5.8.1.1 Generating I nterrupts 


The PIC interrupt sequence involves three bits, from the IRR, ISR, and IMR, for each 
interrupt level. These bits are used to determine the interrupt vector returned, and 
status of any other pending interrupts. Table 5-14 defines the IRR, ISR, and IMR. 


Table 5-14. Interrupt Status Registers 


Pee einen 


Interrupt Request Register. This bit is set on a low to high transition of the interrupt 
line in edge mode, and by an active high level in level mode. This bit is set whether or 
not the interrupt is masked. However, a masked interrupt will not generate INTR. 


Interrupt Service Register. This bit is set, and the corresponding IRR bit cleared, 
when an interrupt acknowledge cycle is seen, and the vector returned is for that 
interrupt. 


IMR Interrupt Mask Register. This bit determines whether an interrupt is masked. 
Masked interrupts will not generate INTR. 


5.8.1.2 Acknowledging I nterrupts 





The processor generates an interrupt acknowledge cycle that is translated by the host 
bridge into a PCI Interrupt Acknowledge Cycle to the ICH9. The PIC translates this 
command into two internal INTA# pulses expected by the 8259 cores. The PIC uses the 
first internal INTA# pulse to freeze the state of the interrupts for priority resolution. On 
the second INTA# pulse, the master or slave sends the interrupt vector to the 
processor with the acknowledged interrupt code. This code is based upon bits [7:3] of 
the corresponding ICW2 register, combined with three bits representing the interrupt 
within that controller. 


Table 5-15. Content of Interrupt Vector Byte 


Master, — Interrup Bits [7:3] sisi 


ICW2[7:3] 
[00 J 
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Hardware/ Software Interrupt Sequence 


1. One or more of the Interrupt Request lines (IRQ) are raised high in edge mode, or 
seen high in level mode, setting the corresponding IRR bit. 


NM 


The PIC sends INTR active to the processor if an asserted interrupt is not masked. 


w 


The processor acknowledges the INTR and responds with an interrupt acknowledge 
cycle. The cycle is translated into a PCI interrupt acknowledge cycle by the host 
bridge. This command is broadcast over PCI by the |CH9. 


4. Upon observing its own interrupt acknowledge cycle on PCI, the ICH9 converts it 
into the two cycles that the internal 8259 pair can respond to. Each cycle appears 
as an interrupt acknowledge pulse on the internal INTA# pin of the cascaded 
interrupt controllers. 


5. Upon receiving the first internally generated INTA# pulse, the highest priority ISR 
bit is set and the corresponding IRR bit is reset. On the trailing edge of the first 
pulse, a slave identification code is broadcast by the master to the slave on a 
private, internal three bit wide bus. The slave controller uses these bits to 
determine if it must respond with an interrupt vector during the second INTA# 
pulse. 


6. Upon receiving the second internally generated INTA# pulse, the PIC returns the 
interrupt vector. If no interrupt request is present because the request was too 
short in duration, the PIC returns vector 7 from the master controller. 


7. This completes the interrupt cycle. In AEOI mode the ISR bit is reset at the end of 
the second INTA# pulse. Otherwise, the ISR bit remains set until an appropriate 
EOI command is issued at the end of the interrupt subroutine. 


Initialization Command Words (I CWx) 


Before operation can begin, each 8259 must be initialized. In the |CH9, this is a four 
byte sequence. The four initialization command words are referred to by their 
acronyms: ICW1, ICW2, ICW3, and ICW4. 


The base address for each 8259 initialization command word is a fixed location in the 
1/O memory space: 20h for the master controller, and AOh for the slave controller. 


Icwl1 


An |/O write to the master or slave controller base address with data bit 4 equal to 1 is 
interpreted as a write to |CW1. Upon sensing this write, the |CH9 PIC expects three 
more byte writes to 21h for the master controller, or Alh for the slave controller, to 
complete the ICW sequence. 


A write to I|CW1 starts the initialization sequence during which the following 
automatically occur: 


1. Following initialization, an interrupt request (IRQ) input must make a low-to-high 
transition to generate an interrupt. 


The Interrupt Mask Register is cleared. 

IRQ7 input is assigned priority 7. 

The slave mode address is set to 7. 

Special mask mode is cleared and Status Read is set to IRR. 


oe wn 
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5.8.3 


5.8.4 


5.8.4.1 


1cw2 


The second write in the sequence (ICW2) is programmed to provide bits [7:3] of the 
interrupt vector that will be released during an interrupt acknowledge. A different base 
is selected for each interrupt controller. 


ICW3 


The third write in the sequence (I1CW3) has a different meaning for each controller. 


¢ For the master controller, |CW3 is used to indicate which IRQ input line is used to 
cascade the slave controller. Within the |CH9, |RQ2 is used. Therefore, bit 2 of 
I|CW3 on the master controller is set to a 1, and the other bits are set to Os. 


¢ For the slave controller, |CW3 is the slave identification code used during an 
interrupt acknowledge cycle. On interrupt acknowledge cycles, the master 
controller broadcasts a code to the slave controller if the cascaded interrupt won 
arbitration on the master controller. The slave controller compares this 
identification code to the value stored in its |CW3, and if it matches, the slave 
controller assumes responsibility for broadcasting the interrupt vector. 


1cw4 


The final write in the sequence (ICW4) must be programmed for both controllers. At 
the very least, bit 0 must be set to a 1 to indicate that the controllers are operating in 
an Intel Architecture-based system. 


Operation Command Words (OCW) 


These command words reprogram the Interrupt controller to operate in various 
interrupt modes. 


¢ OCWI1 masks and unmasks interrupt lines. 


« OCW2 controls the rotation of interrupt priorities when in rotating priority mode, 
and controls the EOI function. 


* OCW3 sets up ISR/IRR reads, enables/disables the special mask mode (SMM), and 
enables/disables polled interrupt mode. 


Modes of Operation 


Fully Nested Mode 


In this mode, interrupt requests are ordered in priority from 0 through 7, with 0 being 
the highest. When an interrupt is acknowledged, the highest priority request is 
determined and its vector placed on the bus. Additionally, the ISR for the interrupt is 
set. This ISR bit remains set until: the processor issues an EOI command immediately 
before returning from the service routine; or if in AEOI mode, on the trailing edge of 
the second INTA#. While the ISR bit is set, all further interrupts of the same or lower 
priority are inhibited, while higher levels generate another interrupt. Interrupt priorities 
can be changed in the rotating priority mode. 
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Special Fully-Nested Mode 


This mode is used in the case of a system where cascading is used, and the priority has 
to be conserved within each slave. In this case, the special fully-nested mode is 
programmed to the master controller. This mode is similar to the fully-nested mode 
with the following exceptions: 


« When an interrupt request from a certain slave is in service, this slave is not locked 
out from the master's priority logic and further interrupt requests from higher 
priority interrupts within the slave are recognized by the master and initiate 
interrupts to the processor. In the normal-nested mode, a slave is masked out 
when its request is in service. 


¢ When exiting the Interrupt Service routine, software has to check whether the 
interrupt serviced was the only one from that slave. This is done by sending a Non- 
Specific EO! command to the slave and then reading its ISR. If it is 0, a non- 
specific EOI can also be sent to the master. 


Automatic Rotation Mode (Equal Priority Devices) 


In some applications, there are a number of interrupting devices of equal priority. 
Automatic rotation mode provides for a sequential 8-way rotation. In this mode, a 
device receives the lowest priority after being serviced. In the worst case, a device 
requesting an interrupt has to wait until each of seven other devices are serviced at 
most once. 


There are two ways to accomplish automatic rotation using OCW2; the Rotation on 
Non-Specific EO| Command (R=1, SL=0, EOI=1) and the rotate in automatic EOI mode 
which is set by (R=1, SL=0, EOI=0). 


Specific Rotation Mode (Specific Priority) 


Software can change interrupt priorities by programming the bottom priority. For 
example, if IRQ5 is programmed as the bottom priority device, then |RQ6 is the highest 
priority device. The Set Priority Command is issued in OCW2 to accomplish this, where: 
R=1, SL=1, and LO-L2 is the binary priority level code of the bottom priority device. 


In this mode, internal status is updated by software control during OCW2. However, it 
is independent of the EOI command. Priority changes can be executed during an EOI 
command by using the Rotate on Specific EO| Command in OCW2 (R=1, SL=1, EOI=1 
and LO-L2=IRQ level to receive bottom priority. 


Poll Mode 


Poll mode can be used to conserve space in the interrupt vector table. Multiple 
interrupts that can be serviced by one interrupt service routine do not need separate 
vectors if the service routine uses the poll command. Poll mode can also be used to 
expand the number of interrupts. The polling interrupt service routine can call the 
appropriate service routine, instead of providing the interrupt vectors in the vector 
table. In this mode, the INTR output is not used and the microprocessor internal 
Interrupt Enable flip-flop is reset, disabling its interrupt input. Service to devices is 
achieved by software using a Poll command. 


The Poll command is issued by setting P=1 in OCW3. The PIC treats its next |/O read as 
an interrupt acknowledge, sets the appropriate ISR bit if there is a request, and reads 
the priority level. Interrupts are frozen from the OCW3 write to the I/O read. The byte 
returned during the |/O read contains a 1 in bit 7 if there is an interrupt, and the binary 
code of the highest priority level in bits 2:0. 
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5.8.4.9 


5.8.4.10 


Cascade Mode 


The PIC in the ICH9 has one master 8259 and one slave 8259 cascaded onto the 
master through IRQ2. This configuration can handle up to 15 separate priority levels. 
The master controls the slaves through a three bit internal bus. In the |CH9, when the 
master drives 010b on this bus, the slave controller takes responsibility for returning 
the interrupt vector. An EOI command must be issued twice: once for the master and 
once for the slave. 


Edge and Level Triggered Mode 


In ISA systems this mode is programmed using bit 3 in |CW1, which sets level or edge 
for the entire controller. In the |CH9, this bit is disabled and a new register for edge and 
level triggered mode selection, per interrupt input, is included. This is the Edge/Level 
control Registers ELCR1 and ELCR2. 


If an ELCR bit is 0, an interrupt request will be recognized by a low-to-high transition 
on the corresponding IRQ input. The IRQ input can remain high without generating 
another interrupt. If an ELCR bit is 1, an interrupt request will be recognized by a high 
level on the corresponding IRQ input and there is no need for an edge detection. The 
interrupt request must be removed before the EOI command is issued to prevent a 
second interrupt from occurring. 


In both the edge and level triggered modes, the IRQ inputs must remain active until 
after the falling edge of the first internal INTA#. If the IRQ input goes inactive before 
this time, a default IRQ7 vector is returned. 


End of Interrupt (EOI) Operations 


An EOI can occur in one of two fashions: by a command word write issued to the PIC 
before returning from a service routine, the EO! command; or automatically when AEOI 
bit in |CW4 is set to 1. 


Normal End of Interrupt 


In normal EOI, software writes an EOI command before leaving the interrupt service 
routine to mark the interrupt as completed. There are two forms of EOI commands: 
Specific and 

Non-Specific. When a Non-Specific EO! command is issued, the PIC clears the highest 
ISR bit of those that are set to 1. Non-Specific EOI is the normal mode of operation of 
the PIC within the ICH9, as the interrupt being serviced currently is the interrupt 
entered with the interrupt acknowledge. When the PIC is operated in modes that 
preserve the fully nested structure, software can determine which ISR bit to clear by 
issuing a Specific EOI. An ISR bit that is masked is not cleared by a Non-Specific EOI if 
the PIC is in the special mask mode. An EOI command must be issued for both the 
master and slave controller. 


Automatic End of Interrupt Mode 


In this mode, the PIC automatically performs a Non-Specific EOI operation at the 
trailing edge of the last interrupt acknowledge pulse. From a system standpoint, this 
mode should be used only when a nested multi-level interrupt structure is not required 
within a single PIC. The AEOI mode can only be used in the master controller and not 
the slave controller. 
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Masking Interrupts 


Masking on an Individual I nterrupt Request 


Each interrupt request can be masked individually by the Interrupt Mask Register 
(IMR). This register is programmed through OCW1. Each bit in the IMR masks one 
interrupt channel. Masking IRQ2 on the master controller masks all requests for service 
from the slave controller. 


Special Mask Mode 


Some applications may require an interrupt service routine to dynamically alter the 
system priority structure during its execution under software control. For example, the 
routine may wish to inhibit lower priority requests for a portion of its execution but 
enable some of them for another portion. 


The special mask mode enables all interrupts not masked by a bit set in the Mask 
register. Normally, when an interrupt service routine acknowledges an interrupt without 
issuing an EOI to clear the ISR bit, the interrupt controller inhibits all lower priority 
requests. In the special mask mode, any interrupts may be selectively enabled by 
loading the Mask Register with the appropriate pattern. The special mask mode is set 
by OCW3 where: SSMM=1, SMM=1, and cleared where SSMM=1, SMM=0O. 


Steering PCI Interrupts 


The ICH9 can be programmed to allow PIRQA#-PIRQH# to be routed internally to 
interrupts 3-7, 9-12, 14 or 15. The assignment is programmable through the PIRQx 
Route Control registers, located at 60- 63h and 68-6Bh in Device 31: Function 0. One or 
more PIRQx# lines can be routed to the same IRQx input. If interrupt steering is not 
required, the Route registers can be programmed to disable steering. 


The PIRQx# lines are defined as active low, level sensitive to allow multiple interrupts 
on a PCI board to share a single line across the connector. When a PIRQx# is routed to 
specified IRQ line, software must change the IRQ's corresponding ELCR bit to level 
sensitive mode. The |CH9 internally inverts the PIRQx# line to send an active high level 
to the PIC. When a PCI interrupt is routed onto the PIC, the selected IRQ can no longer 
be used by an active high device (through SERIRQ). However, active low interrupts can 
share their interrupt with PCI interrupts. 


Internal sources of the PIRQs, including SCI and TCO interrupts, cause the external 


PIRQ to be asserted. The |CH9 receives the PIRQ input, like all of the other external 
sources, and routes it accordingly. 
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Advanced Programmable Interrupt Controller 
(APIC) (D31:FO) 


In addition to the standard ISA-compatible PIC described in the previous chapter, the 
ICH9 incorporates the APIC. While the standard interrupt controller is intended for use 
in a uni-processor system, APIC can be used in either a uni-processor or multi- 
processor system. 


Interrupt Handling 
The I/O APIC handles interrupts very differently than the 8259. Briefly, these 
differences are: 


¢ Method of Interrupt Transmission. The I/O APIC transmits interrupts through 
memory writes on the normal datapath to the processor, and interrupts are handled 
without the need for the processor to run an interrupt acknowledge cycle. 


¢ Interrupt Priority. The priority of interrupts in the 1/O APIC is independent of the 
interrupt number. For example, interrupt 10 can be given a higher priority than 
interrupt 3. 


* More Interrupts. The I/O APIC in the |CH9 supports a total of 24 interrupts. 


¢ Multiple Interrupt Controllers. The |/O APIC architecture allows for multiple I/O 
APIC devices in the system with their own interrupt vectors. 


Interrupt Mapping 


The I/O APIC within the ICH9 supports 24 APIC interrupts. Each interrupt has its own 
unique vector assigned by software. The interrupt vectors are mapped as follows, and 
match “Config 6” of the Multi-Processor Specification. 


APIC Interrupt Mapping? (Sheet 1 of 2) 


mibece yarn Internal Modules 
SERIRQ from Pin | Message 


Cascade from 8259 #1 
8254 Counter 0, HPET #0 (legacy mode) 
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Via Direct Via PCI bnternal Modules 
SERIRQ from Pin | Message 
PIRQA# PIRQA# 


PIRQB# PIRQB# Yes Internal devices are routable; see 
PIRQC# PIRQC# Section 10.1.56 though Section 10.1.62. 
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Option for SCI, TCO, HPET #0,1,2, 3. Other 
. Yes internal devices are routable; see 
Section 10.1.56 through Section 10.1.62. 


NOTES: 

1. When programming the polarity of internal interrupt sources on the APIC, interrupts 0 
through 15 receive active-high internal interrupt sources, while interrupts 16 through 23 
receive active-low internal interrupt sources. 

2. If IRQ 11 is used for HPET #2, software should ensure IRQ 11 is not shared with any other 
devices to ensure the proper operation of HPET #2. |CH9 hardware does not prevent 
sharing of IRQ 11. 

3. If IRQ 12 is used for HPET #3, software should ensure IRQ 12 is not shared with any other 
devices to ensure the proper operation of HPET #3. |CH9 hardware does not prevent 
sharing of IRQ 12. 

4. PIRQ[E:H] are Multiplexed with GPIO pins. Interrupts PIRQ[E:H] will not be exposed if they 
are configured as GPIOs. 





PCI / PCI Express* Message-Based Interrupts 


When external devices through PCI / PCI Express wish to generate an interrupt, they 
will send the message defined in the PCI Express* Base Specification, Revision 1.0a for 
generating INTA# - INTD#. These will be translated internal assertions/de-assertions of 
INTA# - INTD#. 


Front Side Bus Interrupt Delivery 


For processors that support Front Side Bus (FSB) interrupt delivery, the |CH9 requires 
that the |/O APIC deliver interrupt messages to the processor in a parallel manner, 
rather than using the I/O APIC serial scheme. 


This is done by the ICH9 writing (via DMI) to a memory location that is snooped by the 
processor(s). The processor(s) snoop the cycle to know which interrupt goes active. 


The following sequence is used: 


1. When the ICH9 detects an interrupt event (active edge for edge-triggered mode or 
a change for level-triggered mode), it sets or resets the internal IRR bit associated 
with that interrupt. 


2. Internally, the |CH9 requests to use the bus in a way that automatically flushes 
upstream buffers. This can be internally implemented similar to a DMA device 
request. 


3. The ICH9 then delivers the message by performing a write cycle to the appropriate 
address with the appropriate data. The address and data formats are described 
below in Section 5.9.4.4. 


FSB Interrupt Delivery compatibility with processor clock control depends on the 
processor, not the ICH9. 
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Edge-Triggered Operation 


In this case, the “Assert Message” is sent when there is an inactive-to-active edge on 
the interrupt. 


Level-Triggered Operation 


In this case, the “Assert Message” is sent when there is an inactive-to-active edge on 
the interrupt. If after the EOI the interrupt is still active, then another “Assert Message” 
is sent to indicate that the interrupt is still active. 


Registers Associated with Front Side Bus I nterrupt Delivery 


Capabilities Indication: The capability to support Front Side Bus interrupt delivery is 
indicated via ACPI configuration techniques. This involves the BIOS creating a data 
structure that gets reported to the ACPI configuration software. 


Interrupt Message Format 


The ICH9 writes the message to PCI (and to the Host controller) as a 32-bit memory 
write cycle. It uses the formats shown in Table 5-17 and Table 5-18 for the address and 
data. 


The local APIC (in the processor) has a delivery mode option to interpret Front Side Bus 
messages as a SMI in which case the processor treats the incoming interrupt as a SMI 
instead of as an interrupt. This does not mean that the |CH9 has any way to have a SMI 
source from |CH9 power management logic cause the |1/O APIC to send an SMI 
message (there is no way to do this). The |CH9’s I/O APIC can only send interrupts due 
to interrupts which do not include SMI, NMI or INIT. This means that in |A-32/Intel® 64 
based platforms, Front Side Bus interrupt message format delivery modes 010 (SMI/ 
PMI), 100 (NMI), and 101 (INIT) as indicated in this section, must not be used and is 
not supported. Only the hardware pin connection is supported by ICH9. 


Interrupt Message Address Format 


oe 
31:20 | Will always be FEEh 


Destination ID: This is the same as bits 63:56 of the I/O Redirection Table entry for 
the interrupt associated with this message. 


Extended Destination ID: This is the same as bits 55:48 of the I/O Redirection 
Table entry for the interrupt associated with this message. 


Redirection Hint: This bit is used by the processor host bridge to allow the interrupt 
message to be redirected. 

0 = The message will be delivered to the agent (processor) listed in bits 19:12. 

1 = The message will be delivered to an agent with a lower interrupt priority This can 
be derived from bits 10:8 in the Data Field (see below). 

The Redirection Hint bit will be a 1 if bits 10:8 in the delivery mode field associated 
with corresponding interrupt are encoded as 001 (Lowest Priority). Otherwise, the 
Redirection Hint bit will be 0 


Destination Mode: This bit is used only the Redirection Hint bit is set to 1. If the 
Redirection Hint bit and the Destination Mode bit are both set to 1, then the logical 
destination mode is used, and the redirection is limited only to those processors that 
are part of the logical group as based on the logical ID. 


Will always be 00. 
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Interrupt Message Data Format 


a 
31:16 | Will always be 0000h. 


Trigger Mode: 1 = Level, 0 = Edge. Same as the corresponding bit in the I/O 


Redirection Table for that interrupt. 
Delivery Status: 1 = Assert, 0 = Deassert. Only Assert messages are sent. This bit 
is always 1. 


13:12 | Will always be 00 


Destination Mode: 1 = Logical. 0 = Physical. Same as the corresponding bit in the 
1/O Redirection Table for that interrupt. 





Delivery Mode: This is the same as the corresponding bits in the I/O Redirection 
Table for that interrupt. 
aca 000 = Fixed 100 = NMI 
: 001 = Lowest Priority 101 = INIT 
010 = SMI/PMI 110 = Reserved 
011 = Reserved 111 = ExtINT 
7:0 Vector: This is the same as the corresponding bits in the I/O Redirection Table for 
, that interrupt. 


1OxAPIC Address Remapping 


In order to support Intel® Virtualization Technology, interrupt messages are required to 
go through similar address remapping as any other memory request. Address 
remapping allows for domain isolation for interrupts, so a device assigned in one 
domain is not allowed to generate an interrupt to another domain. 


The address remapping is based on the Bus: Device: Function field associated with the 
requests. The internal APIC is required to initiate the interrupt message using a unique 
Bus: Device: function. 


ICH9 allows BIOS to program the unique Bus: Device: Function address for the internal 
APIC. This address field does not change the APIC functionality and the APIC is not 


promoted as a stand-alone PCI device. See Device 31: Function 0 Offset 6Ch for 
additional information. 


External Interrupt Controller Support 


The ICH9 supports external APICs off of PCI Express ports, and does not support APICs 
on the PCI bus. The EOI special cycle is only forwarded to PCI Express ports. 
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Serial Interrupt (D31:FO) 


The ICH9 supports a serial [RQ scheme. This allows a single signal to be used to report 
interrupt requests. The signal used to transmit this information is shared between the 
host, the ICH9, and all peripherals that support serial interrupts. The signal line, 
SERIRQ, is synchronous to PCI clock, and follows the sustained tri-state protocol that is 
used by all PCI signals. This means that if a device has driven SERIRQ low, it will first 
drive it high synchronous to PCI clock and release it the following PCI clock. The serial 
IRQ protocol defines this sustained tri-state signaling in the following fashion: 


« S- Sample Phase. Signal driven low 
* R- Recovery Phase. Signal driven high 
¢ T - Turn-around Phase. Signal released 


The ICH9 supports a message for 21 serial interrupts. These represent the 15 ISA 
interrupts (IRQO-1, 2-15), the four PCI interrupts, and the control signals SMI# and 
IOCHK#. The serial [RQ protocol does not support the additional APIC interrupts (20- 
23). 


When the SATA controller is configured for legacy IDE mode, 1RQ14 and IRQ15 are 
expected to behave as ISA legacy interrupts, which cannot be shared, i.e. through the 
Serial Interrupt pin. If 1RQ14 and IRQ15 are shared with Serial Interrupt pin then 
abnormal system behavior may occur. For example, 1RQ14/15 may not be detected by 
ICH9's interrupt controller. When the SATA controller is not running in Native IDE mode, 
IRQ14 and IRQ15 are used as special interrupts. If the SATA controller is in native 
modes, these interrupts can be mapped to other devices accordingly. 


Start Frame 


The serial IRQ protocol has two modes of operation which affect the start frame. These 
two modes are: Continuous, where the |CH9 is solely responsible for generating the 
start frame; and Quiet, where a serial |RQ peripheral is responsible for beginning the 
start frame. 


The mode that must first be entered when enabling the serial [RQ protocol is 
continuous mode. In this mode, the ICH9 asserts the start frame. This start frame is 4, 
6, or 8 PCI clocks wide based upon the Serial |RQ Control Register, bits 1:0 at 64h in 
Device 31:Function 0 configuration space. This is a polling mode. 


When the serial IRQ stream enters quiet mode (signaled in the Stop Frame), the 
SERIRQ line remains inactive and pulled up between the Stop and Start Frame until a 
peripheral drives the SERIRQ signal low. The |CH9 senses the line low and continues to 
drive it low for the remainder of the Start Frame. Since the first PCI clock of the start 
frame was driven by the peripheral in this mode, the |CH9 drives the SERIRQ line low 
for 1 PCI clock less than in continuous mode. This mode of operation allows for a quiet, 
and therefore lower power, operation. 
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Data Frames 


Once the Start frame has been initiated, all of the SERIRQ peripherals must start 
counting frames based on the rising edge of SERIRQ. Each of the |RQ/DATA frames has 
exactly 3 phases of 1 clock each: 


¢ Sample Phase. During this phase, the SERIRQ device drives SERIRQ low if the 

corresponding interrupt signal is low. If the corresponding interrupt is high, then 
the SERIRQ devices tri-state the SERIRQ signal. The SERIRQ line remains high due 
to pull-up resistors (there is no internal pull-up resistor on this signal, an external 
pull-up resistor is required). A low level during the [RQO-1 and IRQ2-15 frames 
indicates that an active-high ISA interrupt is not being requested, but a low level 
during the PCI INT[A:D], SMI#, and l|OCHK# frame indicates that an active-low 
interrupt is being requested. 


e Recovery Phase. During this phase, the device drives the SERIRQ line high if in 
the Sample Phase it was driven low. If it was not driven in the sample phase, it is 
tri-stated in this phase. 


¢ Turn-around Phase. The device tri-states the SERIRQ line 
Stop Frame 
After all data frames, a Stop Frame is driven by the ICH9. The SERIRQ signal is driven 


low by the ICH9 for 2 or 3 PCI clocks. The number of clocks is determined by the 
SERIRQ configuration register. The number of clocks determines the next mode: 


Stop Frame Explanation 


Stop Frame Width Next Mode 
2 PCI clocks Quiet Mode. Any SERIRQ device may initiate a Start Frame 





. ® seg 
3 PCI clocks oa Mode. Only the host (Intel® ICH9) may initiate a Start 


Specific Interrupts Not Supported via SERIRQ 


There are three interrupts seen through the serial stream that are not supported by the 
ICH9. These interrupts are generated internally, and are not sharable with other 
devices within the system. These interrupts are: 


¢ |RQO. Heartbeat interrupt generated off of the internal 8254 counter 0. 
« IRQ8#. RTC interrupt can only be generated internally. 


¢ IRQ13. Floating point error interrupt generated off of the processor assertion of 
FERR#. 


The ICH9 ignores the state of these interrupts in the serial stream, and does not adjust 
their level based on the level seen in the serial stream. 
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5.10.5 Data Frame Format 


Table 5-20 shows the format of the data frames. For the PCI interrupts (A-D), the 

output from the ICH9 is AND’d with the PCI input signal. This way, the interrupt can be 

signaled via both the PCI interrupt input signal and via the SERIRQ signal (they are 
Table 5-20. Data Frame Format 


shared). 
Clocks Past 
Start Comment 


Ignored. IRQO can only be generated via the internal 
2 
8524 
a ay (ra 


Causes SMI # if low. Will set the SERIRQ_SMI_STS bit. 


11 
14 
7 
20 
23 
26 Ignored. |RQ8# can only be generated internally. 


Lee 
a 
a 
a 
[#4 [NotatachedoSataoge 


PCI INTB# Drive PIRQB# 
PCI INTC# Drive PIRQC# 
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Real Time Clock (D31:F0) 


The Real Time Clock (RTC) module provides a battery backed-up date and time keeping 
device with two banks of static RAM with 128 bytes each, although the first bank has 
114 bytes for general purpose usage. Three interrupt features are available: time of 
day alarm with once a second to once a month range, periodic rates of 122 us to 

500 ms, and end of update cycle notification. Seconds, minutes, hours, days, day of 
week, month, and year are counted. Daylight savings compensation is no longer 
supported. The hour is represented in twelve or twenty-four hour format, and data can 
be represented in BCD or binary format. The design is functionally compatible with the 
Motorola MS146818B. The time keeping comes from a 32.768 kHz oscillating source, 
which is divided to achieve an update every second. The lower 14 bytes on the lower 
RAM block has very specific functions. The first ten are for time and date information. 
The next four (OAh to ODh) are registers, which configure and report RTC functions. 


The time and calendar data should match the data mode (BCD or binary) and hour 
mode (12 or 24 hour) as selected in register B. It is up to the programmer to make 
sure that data stored in these locations is within the reasonable values ranges and 
represents a possible date and time. The exception to these ranges is to store a value 
of CO-FFh in the Alarm bytes to indicate a don’t care situation. All Alarm conditions 
must match to trigger an Alarm Flag, which could trigger an Alarm Interrupt if enabled. 
The SET bit must be 1 while programming these locations to avoid clashes with an 
update cycle. Access to time and date information is done through the RAM locations. If 
a RAM read from the ten time and date bytes is attempted during an update cycle, the 
value read do not necessarily represent the true contents of those locations. Any RAM 
writes under the same conditions are ignored. 


The leap year determination for adding a 29th day to February does not take into 
account the end-of-the-century exceptions. The logic simply assumes that all years 
divisible by 4 are leap years. According to the Royal Observatory Greenwich, years that 
are divisible by 100 are typically not leap years. In every fourth century (years divisible 
by 400, like 2000), the 100-year-exception is over-ridden and a leap-year occurs. Note 
that the year 2100 will be the first time in which the current RTC implementation would 
incorrectly calculate the leap- year. 


The ICH9 does not implement month/year alarms. 


Update Cycles 


An update cycle occurs once a second, if the SET bit of register B is not asserted and 
the divide chain is properly configured. During this procedure, the stored time and date 
are incremented, overflow is checked, a matching alarm condition is checked, and the 
time and date are rewritten to the RAM locations. The update cycle will start at least 
488 us after the UIP bit of register A is asserted, and the entire cycle does not take 
more than 1984 us to complete. The time and date RAM locations (0-9) are 
disconnected from the external bus during this time. 


To avoid update and data corruption conditions, external RAM access to these locations 
can safely occur at two times. When a updated-ended interrupt is detected, almost 999 
ms is available to read and write the valid time and date data. If the UIP bit of Register 
A is detected to be low, there is at least 488 us before the update cycle begins. 


The overflow conditions for leap years adjustments are based on more than one date or 


time item. To ensure proper operation when adjusting the time, the new time and data 
values should be set at least two seconds before leap year occurs. 
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Interrupts 


The real-time clock interrupt is internally routed within the |CH9 both to the 1/O APIC 
and the 8259. It is mapped to interrupt vector 8. This interrupt does not leave the 
ICH9, nor is it shared with any other interrupt. |RQ8# from the SERIRQ stream is 
ignored. However, the High Performance Event Timers can also be mapped to IRQ8#; 
in this case, the RTC interrupt is blocked. 


Lockable RAM Ranges 


The RTC’s battery-backed RAM supports two 8-byte ranges that can be locked via the 
configuration space. If the locking bits are set, the corresponding range in the RAM will 
not be readable or writable. A write cycle to those locations will have no effect. A read 
cycle to those locations will not return the location’s actual value (resultant value is 
undefined). 


Once a range is locked, the range can be unlocked only by a hard reset, which will 
invoke the BIOS and allow it to relock the RAM range. 


Century Rollover 


The ICH9 detects a rollover when the Year byte (RTC I/O space, index offset 09h) 
transitions form 99 to 00. Upon detecting the rollover, the ICH9 sets the 
NEWCENTURY_STS bit (TCOBASE + 04h, bit 7). If the system is in an SO state, this 
causes an SMI#. The SMI# handler can update registers in the RTC RAM that are 
associated with century value. If the system is in a sleep state (S1-S5) when the 
century rollover occurs, the 1CH9 also sets the NEWCENTURY_STS bit, but no SMI # is 
generated. When the system resumes from the sleep state, BIOS should check the 
NEWCENTURY_STS bit and update the century value in the RTC RAM. 


Clearing Battery-Backed RTC RAM 


Clearing CMOS RAM in an ICH9-based platform can be done by using a jumper on 
RTCRST# or GPI. Implementations should not attempt to clear CMOS by using a 
jumper to pull VccRTC low. 


Using RTCRST# to Clear CMOS 


A jumper on RTCRST# can be used to clear CMOS values, as well as reset to default, 
the state of those configuration bits that reside in the RTC power well. When the 
RTCRST# is strapped to ground, the RTC_PWR_STS bit (D31:F0:A4h bit 2) will be set 
and those configuration bits in the RTC power well will be set to their default state. 
BIOS can monitor the state of this bit, and manually clear the RTC CMOS array once the 
system is booted. The normal position would cause RTCRST# to be pulled up through a 
weak pull-up resistor. Table 5-21 shows which bits are set to their default state when 
RTCRST# is asserted. This RTCRST# jumper technique allows the jumper to be moved 
and then replaced—all while the system is powered off. Then, once booted, the 
RTC_PWR_STS can be detected in the set state. 
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Table 5-21. Configuration Bits Reset by RTCRST# Assertion (Sheet 1 of 2) 


- z . Default 
f_sietame | etster | tecaton | ats [Pen 
1/O space (RTC Index + 5 Xx 
OBh) 
I/O space (RTC Index + 5 Xx 
OCh) 
pf 


pe fe 


Alarm Interrupt 
Enable (AIE) 


Alarm Flag (AF) 


SWSMI_RATE_SEL 


SLP_S4# Minimum 
Assertion Width 


SLP_S4# Assertion 
Stretch Enable 


RTC Power Status 
(RTC_PWR_STS) 


Power Failure 
(PWR_FLR) 


AFTERG3_EN 


Power Button Override | Power Management 1 


Status 
(PWRBTNOR_STS) 


RTC Event Enable 
(RTC_EN) 


Register B (General 
Configuration) 
(RTC_REGB) 


Register C (Flag 
Register) 
(RTC_REGC) 


General PM 
Configuration 3 
Register 
GEN_PMCON_ 3 


General PM 
Configuration 3 
Register 
GEN_PMCON_3 


General PM 
Configuration 3 
Register 
GEN_PMCON_3 


General PM 
Configuration 3 
Register 
GEN_PMCON_3 


General PM 
Configuration 3 
Register 
(GEN_PMCON_ 3) 


General PM 
Configuration 3 
Register 
GEN_PMCON_ 3 


Status Register 
(PM1_STS) 


Power Management 1 


Enable Register 
(PM1_EN) 


D31:F0:A4h 


D31:F0O:A4h 


D31:F0:A4h 


D31:F0O:A4h 


D31:F0:A4h 


D31:F0O:A4h 


Power Management 1 

Sleep Type (SLP_TYP) Control (PM1_CNT) PMBase + 04h 
General Purpose 

PME_EN Event 0 Enables PMBase + 2Ch 
Register (GPEO_EN) 
General Purpose 

Te oat Event 0 Enables PMBase + 2Ch 

y Register (GPEO_EN) 

General Purpose 
Event 0 Enables PMBase + 2Ch 
Register (GPEO_EN) 
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Configuration Bits Reset by RTCRST# Assertion (Sheet 2 of 2) 


‘ : 5 Default 
Bit Name Register Location State 
TCO1 Status Register 
NEWCENTURY_STS (TCO1_STS TCOBase + 04h 7 





) po | 

Intruder Detect TCO2 Status Register 

(INTRD_DET) (TCO2_STS) IEDESSS OGD EF 
Backed Up Control Chipset Config 

Top Swap (TS) Register (BUC) Registers: Offset 3414h a 


Using a GPI to Clear CMOS 


A jumper on a GPI can also be used to clear CMOS values. BIOS would detect the 
setting of this GPI on system boot-up, and manually clear the CMOS array. 


The GPI strap technique to clear CMOS requires multiple steps to implement. The 
system is booted with the jumper in new position, then powered back down. The 
jumper is replaced back to the normal position, then the system is rebooted again. 


Clearing CMOS, using a jumper on VccRTC, must not be implemented. 


Processor Interface (D31:F0O) 


The ICH9 interfaces to the processor with a variety of signals 


¢ Standard Outputs to processor: A2ZOM#, SMI#, NMI, INIT#, INTR, STPCLK#, 
IGNNE#, CPUPWRGD, DPSLP# (Mobile Only) 


¢« Standard Input from processor: FERR#, THRMTRIP# 
* Intel SpeedStep® technology output to processor: CPUPWRGD (Mobile Only) 


Most ICH9 outputs to the processor use standard buffers. The |CH9 has separate 
V cpu to Signals that are pulled up at the system level to the processor voltage, and 
thus determines VOH for the outputs to the processor. 


Processor I nterface Signals 


This section describes each of the signals that interface between the ICH9 and the 
processor(s). Note that the behavior of some signals may vary during processor reset, 
as the signals are used for frequency strapping. 


A20M# (Mask A20) 


The A20M# signal is active (low) when both of the following conditions are true: 
¢ The ALT_A20_GATE bit (Bit 1 of PORT92 register) is a 0 
¢ The A20GATE input signal is a 0 


The A20GATE input signal is expected to be generated by the external microcontroller 
(KBC). 
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5.22.12 INI T# (Initialization) 


The INIT# signal is active (driven low) based on any one of several events described in 
Table 5-22. When any of these events occur, INIT# is driven low for 16 PCI clocks, then 
driven high. 


Note: The 16-clock counter for INIT# assertion halts while STPCLK# is active. Therefore, if 
INIT# is Supposed to go active while STPCLK# is asserted, it actually goes active after 
STPCLK# goes inactive. 


This section refers to INIT#, but applies to two signals: INIT# and INIT3_3V# 
(Desktop Only), as INIT3_3V# (Desktop Only) is functionally identical to INIT#, but 
signaling at 3.3 V. 


Table 5-22. INIT# Going Active 


Shutdown special cycle from processor observed INIT# assertion based on value of 
on I|CH-GMCH interconnect (from GMCH). Shutdown Policy Select register (SPS) 


PORTCF9 write, where SYS_RST (bit 1) was a 0 
and RST_CPU (bit 2) transitions from 0 to 1. 


PORT92 write, where INIT_NOW (bit 0) transitions 
fromaOtoal. 


0 to 1 transition on RCIN# must occur 
before the Intel® | CH9 will arm INIT# to be 
generated again. 


RCIN# input signal goes low. RCIN# is expected POTES bee sionals Sper re toe low 


to be driven by the external microcontroller during es See ane 32 States: . 
(KBC) Transition on the RCIN# signal in 


those states (or the transition to 
those states) may not necessarily 
cause the INIT# signal to be 
generated to the processor. 


To enter BIST, software sets CPU_BIST_EN 
CPU BIST bit and then does a full processor reset 
using the CF9 register. 





5.12.1.3 FERR#/1GNNE# (Numeric Coprocessor Error/ Ignore Numeric Error) 


The ICH9 supports the coprocessor error function with the FERR#/IGNNE# pins. The 
function is enabled via the COPROC_ERR_EN bit (Chipset Config Registers: Offset 
31FFh: bit 1). FERR# is tied directly to the Coprocessor Error signal of the processor. If 
FERR# is driven active by the processor, |RQ13 goes active (internally). When it 
detects a write to the COPROC_ERR register (1/O Register FOh), the |CH9 negates the 
internal |RQ13 and drives |GNNE# active. IGNNE# remains active until FERR# is driven 
inactive. |GNNE# is never driven active unless FERR# is active. 
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Figure 5-5. Coprocessor Error Timing Diagram 


FERR# 


Internal IRQ13 


I/O Write to FOh 


IGNNE# 





If COPROC_ERR_EN is not set, the assertion of FERR# will not generate an internal 
IRQ13, nor will the write to FOh generate IGNNE#. 


5.12.1.4 NMI (Non-Maskable Interrupt) 


Non-Maskable Interrupts (NMIs) can be generated by several sources, as described in 
Table 5-23. 


Table 5-23. NMI Sources 


SERR# goes active (either internally, Can instead be routed to generate an SCI, through 
externally via SERR# signal, or via the NMI2SCI_EN bit (Device 31:Function 0, TCO 
message from (G)MCH) Base + O8h, bit 11). 


Can instead be routed to generate an SCI, through 
the NMI2SCI_EN bit (Device 31: Function 0, TCO 
Base + O8h, bit 11). 


IOCHK# goes active via SERIRQ# stream 
(ISA system Error) 





5.12.1.5 Stop Clock Request (STPCLK#) 


The ICH9 power management logic controls this active-low signal. Refer to 
Section 5.13 for more information on the functionality of this signal. 


5.12.1.6 CPU Power Good (CPUPWRGD) 


This signal is connected to the processor’s PWRGOOD input. This signal represents a 
logical AND of the ICH9’s PWROK and VRMPWRGD signals. 


5.12.1.7 Deeper Sleep (DPSLP#) (Mobile Only) 


This active-low signal controls the internal gating of the processor’s core clock. This 
signal asserts before and deasserts after the STP_CPU# signal to effectively stop the 
processor’s clock (internally) in the states in which STP_CPU# can be used to stop the 
processor’s clock externally. 
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5.12.2 


5.12.2.1 


Table 5-24. 


5.12.2.2 
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Dual-Processor I ssues (Desktop Only) 


Signal Differences 


In dual-processor designs, some of the processor signals are unused or used differently 
than for uniprocessor designs. 


DP Signal Differences 


a 
A20M# / A20GATE | Generally not used, but still supported by Intel® ICH9. 


Used for S1 State as well as preparation for entry to S3-S5 


STPCLK# Also allows for THERM# based throttling (not via ACPI control methods). 
Should be connected to both processors. 


FERR# / IGNNE# Generally not used, but still supported by ICH9. 


Power Management 





For multiple- processor (or Multiple-core) configurations in which more than one Stop 
Grant cycle may be generated, the (G)MCH is expected to count Stop Grant cycles and 
only pass the last one through to the ICH9. This prevents the |CH9 from getting out of 
sync with the processor on multiple STPCLK# assertions. 


Because the S1 state will have the STPCLK# signal active, the STPCLK# signal can be 
connected to both processors. However, for ACPI implementations, the BIOS must 
indicate that the |CH9 only supports the C1 state for dual-processor designs. 


In going to the S1 state for desktop, multiple Stop-Grant cycles will be generated by 
the processors. It is assumed that prior to setting the SLP_EN bit (which causes the 
transition to the S1 state), the processors will not be executing code that is likely to 
delay the Stop-Grant cycles. 


In going to the S3, S4, or S5 states, the system will appear to pass through the S1 
state; thus, STPCLK# and SLP# are also used. During the S3, S4, and S5 states, both 
processors will lose power. Upon exit from those states, the processors will have their 
power restored. 
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5.13 Power Management (D31:F0O) 


5.13.1 Features 
¢ Support for Advanced Configuration and Power Interface, Version 3.0a (ACPI) 
providing power and thermal management 
— ACPI 24-Bit Timer 


— Software initiated throttling of processor performance for Thermal and Power 
Reduction 


Hardware Override to throttle processor performance if system too hot 
SCI and SMI # Generation 


— ACPI C2 state Stop-Grant state (using STPCLK# signal) halts processor’s 
instruction stream 


« PCI PME# signal for Wake Up from Low-Power states 
¢« System Clock Control 


— (Mobile Only) ACPI C3 State: Ability to halt processor clock (but not memory 
clock) 


— (Mobile Only) ACPI C4 State: Ability to lower processor voltage. 
— (Mobile Only) CLKRUN# Protocol for PCI Clock Starting/Stopping 
« System Sleep State Control 


— ACPI S1 state: Stop Grant (using STPCLK# signal) halts processor’s instruction 
stream (only STPCLK# active) 


— ACPI S3 state — Suspend to RAM (STR) 
— ACPI S4 state — Suspend-to-Disk (STD) 
— ACPI G2/S5 state — Soft Off (SOFF) 
— Power Failure Detection and Recovery 
¢ Management Engine Power Management Support 


— New Wake events from the Management Engine (enabled from all S-States 
including Catastrophic S5 conditions) 


e« Streamlined Legacy Power Management for APM-Based Systems 


5.13.2. Intel® 1CH9 and System Power States 


Table 5-25 shows the power states defined for |CH9-based platforms. The state names 
generally match the corresponding ACPI states. 
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Table 5-25. General Power States for Systems Using Intel® 1 CH9 


State/ an 
Substates Legacy Name / Description 


Full On: Processor operating. Individual devices may be shut down to save 
power. The different processor operating levels are defined by Cx states, as 

G0/S0/CO shown in Table 5-26. Within the CO state, the Intel® 1CH9 can throttle the 
processor using the STPCLK# signal to reduce power consumption. The throttling 
can be initiated by software or by the operating system or BIOS. 


Auto-Halt: Processor has executed an AutoHalt instruction and is not executing 
G0/S0/C1 boy 
code. The processor snoops the bus and maintains cache coherency. 


Stop-Grant: The STPCLK# signal goes active to the processor. The processor 
performs a Stop-Grant cycle, halts its instruction stream, and remains in that 
state until the STPCLK# signal goes inactive. In the Stop-Grant state, the 
processor snoops the bus and maintains cache coherency. 


G0/S0/C2 


Stop-Clock: The STPCLK# signal goes active to the processor. The processor 
performs a Stop-Grant cycle, halts its instruction stream. ICH9 then asserts 
DPSLP# followed by STP_CPU#, which forces the clock generator to stop the 
processor clock. This is also used for Intel SpeedStep® technology support. 
Accesses to memory (by graphics, PCI, or internal units) is not permitted while in 
a C3 state. 


G0/S0/C3 
(Mobile 
Only) 


Stop-Clock with Lower Processor Voltage: This closely resembles the GO/ 
S0/C3 state. However, after the |CH9 has asserted STP_CPU#, it then lowers the 
voltage to the processor. This reduces the leakage on the processor. Prior to 
exiting the C4 state, the |CH9 increases the voltage to the processor. 


G0/S0/C4 
(Mobile 
Only) 


Stop-Clock with Very Low Processor Voltage and Cache Flush: The 
processor voltage is dropped to the minimum level needed to maintain the state. 
Caches are flushed from the processor to main memory prior to entering C5, 
allowing bus master activity while in C5. 


G0/S0/C6 Stop-Clock with Partially Processor Power Down and Cache Flush: C6 
(Mobile includes a cache flush as in C5. The processor saves internal state to RAM 
Only allowing the processor to partially turn off. 


Stop-Grant: Similar to GO/S0/C2 state. 


) 
G1/S1 Note: The behavior for this state is slightly different when supporting Intel® 64 
processors. 


Suspend-To-RAM (STR): The system context is maintained in system DRAM, 

G1/S3 but power is shut off to non-critical circuits. Memory is retained, and refreshes 
continue. All clocks stop except RTC clock. 

G1/S4 Suspend-To-Disk (STD): The context of the system is maintained on the disk. 

All power is then shut off to the system except for the logic required to resume. 


G2/S5 Soft Off (SOFF): System context is not maintained. All power is shut off except 
for the logic required to restart. A full boot is required when waking. 


Mechanical OFF (MOFF): System context not maintained. All power is shut off 
except for the RTC. No “Wake” events are possible, because the system does not 
have any power. This state occurs if the user removes the batteries, turns off a 
G3 mechanical switch, or if the system power supply is at a level that is insufficient 
to power the “waking” logic. When system power returns, transition will depend 


G0/S0/C5 
(Mobile 
Only) 


on the state just prior to the entry to G3 and the AFTERG3 _EN bit in the 


GEN_PMCONS register (D31:FO, offset A4). Refer to Table 5-33 for more details. 
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Table 5-26 shows the transitions rules among the various states. Note that transitions 
among the various states may appear to temporarily transition through intermediate 
states. For example, in going from SO to S1, it may appear to pass through the GO/SO/ 
C2 states. These intermediate transitions and states are not listed in the table. 


Table 5-26. State Transition Rules for Intel® 1CH9 


Present eas 5 


¢ Processor halt instruction GO0/S0/C1 

¢ Level 2 Read G0/S0/C2 

* Level 3 Read (Mobile Only) G0/S0/C2, GO/SO/C3 or GO/S0/C4 - depending 

« Level 4 Read (Mobile Only) on C4onC3_EN bit (D31: FO: Offset AOh: bit 7) 
GO/S0/CO y and BM_STS_ZERO_EN bit (D31: FO: Offset 

* SLP_EN bit set AQh: bit 2) (Mobile Only) 

¢ Power Button Override G1/Sx or G2/S5 state 

¢ Mechanical Off/Power Failure G2/S5 


G3 


¢« Any Enabled Break Event G0/S0/CO 
¢ STPCLK# goes active G0/S0/C2 
GO/SO/C1 ¢ Power Button Override G2/S5 
¢ Power Failure G3 
¢ Any Enabled Break Event G0/S0/CO 
¢ Power Button Override G2/S5 
G0/S0/C2 ¢ Power Failure G3 
¢ Previously in C3/C4 and bus masters C3 or C4 - depending on PDME bit (D31:FO: 
idle Offset AQh: bit 4) 


¢« Any Enabled Break Event G0/S0/CO 
¢ Any Bus Master Event GO0/S0/C2 - if PUME bit (D31:FO: Offset AQh: 
G0/S0/C3 bit 3) is set, else GO/S0/CO 
(Mobile ¢ Power Button Override G2/S5 
Only) ¢ Power Failure G3 
¢ Previously in C4 and bus masters C4 - depending on PDME bit (D31:FO: Offset 
idle AQh: bit 4 
¢« Any Enabled Break Event G0/S0/CO 
GO/S0/C4 | ~ Any Bus Master Event G0/S0/C2 - if PUME bit (D31:FO: Offset AQh: 
(Mobile * Power Button Override bit 3) is set, else GO/S0/CO 


Only) * Power Failure a 


¢« Any Enabled Break Event G0/S0/CO 
¢« Any Bus Master Event Cs 

¢ Power Button Override G2/S5 

¢ Power Failure 

¢ Any Enabled Break Event G0/S0/CO 
¢ Any Bus Master Event G6 

¢ Power Button Override G2/S5 

¢ Power Failure G3 





G0/S0/C5 
(Mobile 
Only) 


G0/S0/C6 
(Mobile 
Only) 


G1/S1, ¢« Any Enabled Wake Event G0/S0/CO (See Note 2) 
G1/S3, or * Power Button Override G2/S5 
G1/S4 * Power Fai G3 


¢« Any Enabled Wake Event ¢ G0/S0/CO (See Note 2) 
G2/S5 f 
¢ Power Failure * G3 


¢ Power Returns Optional to go to SO/CO (reboot) or G2/S5 
G3 (stay off until power button pressed or other 
wake event). (See Note 1 and 2) 








NOTES: 
1. Some wake events can be preserved through power failure. 
2. Transitions from the S1-S5 or G3 states to the SO state are deferred until BATLOW# is 


inactive in mobile configurations. 
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5.13.3 System Power Planes 


The system has several independent power planes, as described in Table 5-27. Note 
that when a particular power plane is shut off, it should go to a O V level. 


Table 5-27. System Power Plane 


SLP S3# The SLP_S3# signal can be used to cut the power to the processor 
signal completely. For Mobile systems, the DPRSLPVR support allows 


lowering the processor’s voltage during the C4 state. 


When SLP_S3# goes active, power can be shut off to any circuit 
not required to wake the system from the S3 state. Since the S3 
state requires that the memory context be preserved, power must 
arid be retained to the main memory. 
avs The processor, devices on the PCI bus, LPC I/F, and graphics will 
typically be shut off when the Main power plane is shut, although 


there may be small subsections powered. 


context does not need to be preserved in the S5 state, the power 


When the SLP_S4# goes active, power can be shut off to any 

circuit not required to wake the system from the S4. Since the 

SLP_S4# memory context does not need to be preserved in the S4 state, 

MEMORY signal the power to the memory can also be shut down. 

SLP_S5# When SLP_S5# goes active, power can be shut to any circuit not 

signal required to wake the system from the S5 state. Since the memory 
to the memory can also be shut. 


This pin is asserted when the manageability platform goes to MOff. 
Link Depending on the platform, this pin may be used to control the 
Controller 7 MCH, ICH controller link power planes, the clock chip power, and 
the SPI flash power. 


Individual subsystems may have their own power plane. For 
DEVICE[n] GPIO example, GPIO signals may be used to control the power to disk 
drives, audio amplifiers, or the display screen. 


5.13.4 SMI #/ SCI Generation 


On any SMI# event taking place, |CH9 asserts SMI# to the processor, which causes it 
to enter SMM space. SMI# remains active until the EOS bit is set. When the EOS bit is 
set, SMI# goes inactive for a minimum of 4 PCI clocks. If another SMI event occurs, 
SMI # is driven active again. 





The SCI is a level-mode interrupt that is typically handled by an ACPI-aware operating 
system. In non-APIC systems (which is the default), the SCI IRQ is routed to one of the 
8259 interrupts (IRQ 9, 10, or 11). The 8259 interrupt controller must be programmed 
to level mode for that interrupt. 


In systems using the APIC, the SCI can be routed to interrupts 9, 10, 11, 20, 21, 22, or 
23. The interrupt polarity changes depending on whether it is on an interrupt shareable 
with a PIRQ or not (see Section 13.1.3). The interrupt remains asserted until all SCI 
sources are removed. 


Table 5-28 shows which events can cause an SMI# and SCI. Note that some events can 
be programmed to cause either an SMI# or SCI. The usage of the event for SCI 
(instead of SMI#) is typically associated with an ACPl-based system. Each SMI# or SCI 
source has a corresponding enable and status bit. 
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Table 5-28. Causes of SMI# and SCI (Sheet 1 of 2) 


Cause | scr | Additional Enables Where Reported 
SW Generated GPE | Yes | SWGPE_EN=1 SWGPE_STS 


FSMIE 
(See SPI Hardware 

SPI Command Completed Sequencing Flash Control SPI_STS 
Register) 


PME# PME_EN=1 PME_STS 

PME_BO (Internal, Bus 0, a 

PME-Capable Agents) Yes PME_BO_EN=1 PME_BO_STS 
PCI_EXP_EN=1 

PCI Express* PME Message Y = PCI_EXP_STS 

PC Expresst PME Messages, [Yes (Not enabled for SMI) 

PCI Express Hot Plug Message | Yes HST Pre EN? HOT_PLUG_STS 

: : (Not enabled for SMI) - 

= E 


Power Button Press 


Power Button Override (Note Yes 
7) 


SCI 
Yes 
No 

es 
Yes 

es 
es 
Yes 
RTC Alarm 
es 
es 
es 
es 
es 
es 
es 
es 
Yes 
es 
es 
es 


PWRBTN_EN=1 PWRBTN_STS 


RTC_EN=1 RTC_STS 


Ring Indicate RI_EN=1 RI_STS 


USB#1 wakes 


USB1_EN=1 USB1_STS 


USB#2 wakes |Yes | Z = 
USB#3 wakes |Yes | USB3_EN=1 USB3_STS 

USB#4 wakes |Yes | USB4_EN=1 USB4_STS 

USB#5 wakes |Yes | a Z 


USB2_EN=1 USB2_STS 
USB5_EN=1 USB5_STS 


Ye 
Ye 
Ye 
Ye 
Ye 
Ye 
Ye 


THRM# pin active |Yes | THRM_EN=1 THRM_STS 


TMROF_EN=1 TMROF_STS 


GPI[x]_ Route=10 

(SCI) GPI[x]_STS 
GPI[x]_Route=01 Ix]_ 
(SMI) 
GPEO[x]_EN=1 


ACPI Timer overflow (2.34 
sec. 


) 
Any GPI 
ue GPEO_STS 


TCO SCI Logic 
TCO SCI message from Y 
(G)MCH 


TCO SMI Logic |No | 


TCO SMI — Year 2000 Rollover |No | 
TCO SMI — TCO TIMEROUT |No | 


TCO SMI — OS writes to 


TCOSCI_EN=1 TCOSCI_STS 


TCO_EN=1 TCO_STS 


TCO_DAT_IN register 


TCO SMI — Message from No 


(G)MCH 
TCO SMI — NMI occurred (and 
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TCO SMI — INTRUDER# signal 
goes active 


TCO SMI — Change of the 
BIOSWE bit from 0 to 1 
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Table 5-28. Causes of SMI# and SCI (Sheet 2 of 2) 
Cause | scr | smi | Additional Enables Where Reported 
TED 3 Ml = Winite attempted Yes | BIOSWE=1 BIOSWR_STS 


to BIOS 
GBL_EN=1 GBL_STS 


BIOS_RLS written to Yes 


Periodic timer expires Yes 


Yes | LEGACY_USB2_EN = 1 | LEGACY_USB2_STS 
Yes | INTEL_USB2_EN =1_ | INTEL_USB2_STS 


Yes | LEGACY_USB_EN=1 | LEGACY_USB_STS 


DEVMON_STS, 
DEVACT_STS 


2 


64 ms timer expires fe) 


Enhanced USB Legacy 
Support Event 


Enhanced USB Intel Specific 
Event 


UHCI USB Legacy logic 
Serial |RQ SMI reported 


Device monitors match 
address in its range 


2 


Oo 


Yes none 


SMB_SMI_EN 
Yes Host Controller 
Enabled 


SMBus host status 
reg 


SMBus Host Controller 


2 


SMBus Slave SMI message No 


SMBus SMBALERT# signal 


active = 7 
SMBus Host Notify message —_ HOST_NOTIFY_INTRE | SMBUS_SMI_STS 
received N HOST_NOTIFY_STS 
(mobile aly) Eavnee BATLOW_EN=1. BATLOW_STS 
assertion - - 

Aces microcontroller 62h/ No fyes | MCSMI_EN MCSMI_STS 


SLP_EN bit written to 1 |No  |Yes | SMI_ON_SLP_EN=1 SMI_ON_SLP_EN_STS 


; : USB2_EN=1, : 
USB Per-Port Registers Write es Write Enable SMI En USB2_STS, Write 
Enable bit changes to 1. able = = Enable Status 


Write attempted to BIOS [No | Yes BIOSWE = 0 BIOSWR_STS 


GPIO Lockdown Enable bit Yes GPIO_UNLOCK_SMI_E | GPIO_UNLOCK_SMI_S 
changes from ‘1’ to ‘0’. N=1 TS 


SCI_EN must be 1 to enable SCI. SCl_EN must be 0 to enable SMI. 

SCI can be routed to cause interrupt 9:11 or 20:23 (20:23 only available in APIC mode). 
GBL_SMI_EN must be 1 to enable SMI. 

EOS must be written to 1 to re-enable SMI for the next 1. 

ICH9 must have SMI# fully enabled when ICH9 is also enabled to trap cycles. If SMI# is 
not enabled in conjunction with the trap enabling, then hardware behavior is undefined. 
Only GPI[15:0] may generate an SMI# or SCI. 

7. When a power button override first occurs, the system will transition immediately to S5. 
The SCI will only occur after the next wake to SO if the residual status bit 
(PWRBTNOR_STS) is not cleared prior to setting SCI_EN. 





OP iN 
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5.13.4.1 


5.13.4.2 


5.13.5 


PCI Express* SCI 


PCI Express ports and the (G)MCH (via DMI) have the ability to cause PME using 
messages. When a PME message is received, ICH9 will set the PCl_EXP_STS bit. If the 
PCI_EXP_EN bit is also set, the |CH9 can cause an SCI via the GPE1_STS register. 


PCI Express* Hot-Plug 


PCI Express has a Hot-Plug mechanism and is capable of generating a SCI via the GPE1 
register. It is also capable of generating an SMI. However, it is not capable of 
generating a wake event. 


Dynamic Processor Clock Control 


The ICH9 has extensive control for dynamically starting and stopping system clocks. 
The clock control is used for transitions among the various SO/Cx states, and processor 
throttling. Each dynamic clock control method is described in this section. The various 
sleep states may also perform types of non-dynamic clock control. 


The ICH9 supports the ACPI CO, C1 and C2 states (in desktop) or CO, Cl, C2, C3, C4, 
C5 and C6 (in mobile) states. 


The Dynamic Processor Clock control is handled using the following signals: 
e STPCLK#: Used to halt processor instruction stream. 
¢« (Mobile Only) STP_CPU#: Used to stop processor’s clock 
* (Mobile Only) DPSLP#: Used to force Deeper Sleep for processor. 
* (Mobile Only) DPRSLPVR: Used to lower voltage of VRM during C4 state. 


¢« (Mobile Only) DPRSTP#: Used to alert the processor of C4 state. Also works in 
conjunction with DPRSLPVR to communicate to the VRM whether a slow or fast 
voltage ramp should be used. 


The C1 state is entered based on the processor performing an auto halt instruction. 


The C2 state is entered based on the processor reading the Level 2 register in the 
ICH9. 


(Mobile Only) The C2 state can also be entered from C3 or C4 states if bus masters 
require snoops and the PUME bit (D31:FO: Offset AQh: bit 3) is set. 


(Mobile Only) The C3 state is entered based on the processor reading the Level 3 
register in the |CH9 and when the C4onC3_EN bit is clear (D31:F0: Offset AO: bit 7). 
This state can also be entered after a temporary return to C2 from a prior C3 or C4 
state. 


(Mobile Only) The C4 state is entered based on the processor reading the Level 4 
register in the |CH9, or by reading the Level 3 register when the C4onC3_EN bit is set. 
This state can also be entered after a temporary return to C2 from a prior C4 state. 


(Mobile Only) The C5 or C6 state is entered based on the processor reading the Level 5 
or Level 6 register in the |CH9 or the processor sending the stop grant message. Note: 
The ICH uses the same flow for both C5 and C6 states. The platform must only support 
one or the other since the programmable exit timers for C5 and C6 are different, and 
the flow uses the same timers for both which are statically configured. 


A Cl or C2 state in desktop or a C1, C2, C3, C4, C5 or C6 state in mobile ends due to a 
Break event. Based on the break event, the ICH9 returns the system to CO state. 
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Table 5-29. 


5.13.5.1 


166 





Table 5-29 lists the possible break events from C2, C3, C4, C5 or C6. The break events 
from C1 are indicated in the processor’s datasheet. The break events for C3, C4, C5 
and C6 are Mobile Only. 


Break Events 


Breaks 
Comment 
from 


IRQ[0:15] when using the 8259s, IRQ[0:23] 
for 1/O APIC. Since SCI is an interrupt, any SCI 
will also be a break event. 


Any internal event that cause an | C2, C3, C4, : 

NMI or SMI4# C5, C6 Many possible sources 

Any internal event that cause C2, C3, C4 | Could be indicated by the keyboard controller 
INIT# to go active C5, C6 via the RCIN input signal. 


Any unmasked interrupt goes C2, C3, C4, 
active C5, C6 


Any bus master request Need to wake up processor so it can do snoops 
(internal, external or DMA) goes Note: If the PUME bit (D31:FO: Offset AQh: bit 
active and BM_RLD=1 3) is set, then bus master activity will NOT be 

(D31: FO: Offset PMBASE+04h: treated as a break event. Instead, there will be 
bit 1) a return only to the C2 state. 


Only available if FERR# enabled for break event 
indication (See FERR# Mux Enable in GCS, 
Chipset Config Registers: Offset 3410h: bit 6) 


Processor Pending Break Event 
Indication 


Can be sent at any time after the Ack-C2 
message and before the Ack-CO message, 
when not in CO state. 


C2, C3, C4, 


REQ-CO Message from MCH C5, C6 


Slow C4 and C5 Exit (Mobile Only) 


In order to eliminate the audible noise caused by aggressive voltage ramps when 
exiting C4 or C5 states at a regular, periodic frequency, the |CH9 supports a method to 
slow down the voltage ramp at the processor VR for certain break events. If enabled for 
this behavior, the |CH9 treats IRQO and IRQ8 as “slow” break events since both of 
these can be the system timer tick interrupt. Rather than carefully tracking the 
interrupt and timer configuration information to track the one correct interrupt, it was 
deemed acceptable to simplify the logic and slow the break exit sequence for both 
interrupts. Other break event sources invoke the normal exit timings. 


The ICH9 indicates that a slow voltage ramp is desired by deasserting DPRSTP# (high) 
and leaving DPRSLPVR asserted (high). The normal voltage ramp rate is communicated 
by deasserting DPRSTP# (high) and deasserting DPRSLPVR (low). 


The ICH9 waits an additional delay before starting the normal voltage ramp timer 
during the C4 or C5 exit sequence. If a “fast” break event occurs during the additional, 
slow-Exit time delay, the ICH9 quickly deasserts DPRSLPVR (low), thereby speeding up 
the voltage ramp and reducing the delay to a value that is typically seen by the device 
in the past. In the event that a fast break event and a slow break event occur together, 
the fast flow is taken. 


The ICH9 provides separate enabled for Slow C4 Exit and Slow C5 exit. 
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Transition Rules among SO/ Cx and Throttling States 


The following priority rules and assumptions apply among the various SO/Cx and 
throttling states: 


¢ Entry to any SO/Cx state is mutually exclusive with entry to any S1-S5 state. This 
is because the processor can only perform one register access at a time and Sleep 
states have higher priority than thermal throttling. 


¢ When the SLP_EN bit is set (system going to a S1-S5 sleep state), the THTL_EN 
and FORCE_THTL bits can be internally treated as being disabled (no throttling 
while going to sleep state). 


¢ If the THTL_EN or FORCE_THTL bits are set, and a Level 2, Level 3 or Level 4 read 
then occurs, the system should immediately go and stay in a C2, C3 or C4 state 
until a break event occurs. A Level 2, Level 3 or Level 4 read has higher priority 
than the software initiated throttling. C3 and C4 support is Mobile Only. 


¢ After an exit from a C2, C3 or C4 state (due to a Break event), and if the THTL_EN 
or FORCE_THTL bits are still set, the system will continue to throttle STPCLK#. 
Depending on the time of break event, the first transition on STPCLK# active can 
be delayed by up to one THRM period (1024 PCI clocks = 30.72 us). C3 and C4 
support is Mobile Only. 


¢ The Host controller must post Stop-Grant cycles in such a way that the processor 
gets an indication of the end of the special cycle prior to the |CH9 observing the 
Stop-Grant cycle. This ensures that the STPCLK# signals stays active for a 
sufficient period after the processor observes the response phase. 


e If in the C1 state and the STPCLK# signal goes active, the processor will generate a 
Stop-Grant cycle, and the system should go to the C2 state. When STPCLK# goes 
inactive, it should return to the C1 state. 


Deferred C3/ C4 (Mobile Only) 


Due to the new DMI protocol, if there is any bus master activity (other than true 
isochronous), then the CO to C3 transition will pause at the C2 state. |CH9 will keep the 
processor in a C2 state until: 


* ICH9 sees no bus master activity. 


¢ A break event occurs. In this case, the ICH9 will perform the C2 to CO sequence. 
Note that bus master traffic is not a break event in this case. 


To take advantage of the Deferred C3/C4 mode, the BM_STS_ZERO_EN bit must be 
set. This will cause the BM_STS bit to read as 0 even if some bus master activity is 
present. If this is not done, then the software may avoid even attempting to go to the 
C3 or C4 state if it sees the BM_STS bit as 1. 


If the PUME bit (D31:FO: Offset AQh: bit 3) is 0, then the ICH9 will treat bus master 
activity as a break event. When reaching the C2 state, if there is any bus master 
activity, the |CH9 will return the processor to a CO state. 


POPUP (Auto C3/ C4 to C2) (Mobile Only) 


When the PUME bit (D31:F0O: Offset AQh: bit 3) is set, the |CH9 enables a mode of 
operation where standard (non-isochronous) bus master activity will not be treated as 
a full break event from the C3 or C4 states. Instead, these will be treated merely as 
bus master events and return the platform to a C2 state, and thus allow snoops to be 
performed. 


After returning to the C2 state, the bus master cycles will be sent to the (G)MCH, even 
if the ARB_DIS bit is set. 
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POPDOWN (Auto C2 to C3/ C4) (Mobile Only) 


After returning to the C2 state from C3/C4, it the PDME bit (D31:FO: Offset AQ9h: bit 4) 
is set, the platform can return to a C3 or C4 state (depending on where it was prior to 
going back up to C2). This behaves similar to the Deferred C3/C4 transition, and will 
keep the processor in a C2 state until: 


¢« Bus masters are no longer active. 
¢ A break event occurs. Note: Bus master traffic is not a break event in this case. 


C5 and C6 Entry/ Exit (Mobile Only) 


The ICH9 uses the same flow for both C5 and C6 states. However, the platform must 
only support C5 or C6, since the same programmable exit times used are different, and 
the timers are shared. The ICH essentially aliases the Level 5 and Level 6 reads 
together and the Ack_C5 and Ack_C6 messages together. 


C5/C6 Entry: 

1. ICH receives Level 5 Read or Level 6 Read from MCH 

2. ICH asserts STPCLK# 

3. MCH receives Stop Grant message from processor 

4. ICH receives Req C2 message from MCH 

5. ICH asserts PMSYNC# to MCH 

6. ICH receives Ack_C5 or Ack_C6 message from MCH after MCH has switched to No 
snoop mode and asserts CPU_SLP. MCH must no send Req_CO until after it sends 


Ack_C5 or Ack_C6. 


7. [CH asserts DPSLP#, STPCPU#, DPRSTP# and DPRSLPVR signals in sequence based 
on timer values. 


C5 Exit (Mobile Only) 


When the ICH detects a break event after entering C5 due to an internal or external 
event, it de-asserts DPRSLPVR, DPRSTP#, STPCPU#, DPSLP#, PMSYNC# and STPCLK# 
signals in sequence based on timer values. The ICH does not attempt to abort the C5 
entry sequence if a break event is detected while entering C5. 


Dynamic PCI Clock Control (Mobile Only) 


The PCI clock can be dynamically controlled independent of any other low-power state. 
This control is accomplished using the CLKRUN#¥ protocol as described in the PCI Mobile 
Design Guide, and is transparent to software. 
The Dynamic PCI Clock control is handled using the following signals: 
¢ CLKRUN#: Used by PCI and LPC peripherals to request the system PCI clock to run 
« STP_PCI#: Used to stop the system PCI clock 


The 33 MHz clock to the ICH9 is “free-running” and is not affected by the STP_PCI# 
signal. 
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Conditions for Checking the PCI Clock 


When there is a lack of PCI activity the |CH9 has the capability to stop the PCI clocks to 
conserve power. “PCI activity” is defined as any activity that would require the PCI 
clock to be running. 


Any of the following conditions will indicate that it is not okay to stop the PCI clock: 
¢ Cycles on PCI or LPC 
* Cycles of any internal device that would need to go on the PCI bus 
¢ SERIRQ activity 


Behavioral Description 


¢ When there is a lack of activity (as defined above) for 29 PCI clocks, the |CH9 
deasserts (drive high) CLKRUN# for 1 clock and then tri-states the signal. 


Conditions for Maintaining the PCI Clock 


PCI masters or LPC devices that wish to maintain the PCI clock running will observe the 
CLKRUN# signal deasserted, and then must re-assert if (drive it low) within 3 clocks. 
¢ When the ICH9 has tri-stated the CLKRUN# signal after deasserting it, the |CH9 
then checks to see if the signal has been re-asserted (externally). 
« After observing the CLKRUN# signal asserted for 1 clock, the ICH9 again starts 
asserting the signal. 
¢ If an internal device needs the PCI bus, the |CH9 asserts the CLKRUN#¥ signal. 


Conditions for Stopping the PCI Clock 


¢ If no device re-asserts CLKRUN# once it has been deasserted for at least 6 clocks, 
the ICH9 stops the PCI clock by asserting the STP_PCI# signal to the clock 
synthesizer. 


Conditions for Re-Starting the PCI Clock 


¢ A peripheral asserts CLKRUN# to indicate that it needs the PCI clock re-started. 


e When the ICH9 observes the CLKRUN# signal asserted for 1 (free running) clock, 
the ICH9 deasserts the STP_PCI# signal to the clock synthesizer within 4 (free 
running) clocks. 


¢ Observing the CLKRUN# signal asserted externally for 1 (free running) clock, the 
ICH9 again starts driving CLKRUN# asserted. 


If an internal source requests the clock to be re-started, the |CH9 re-asserts CLKRUN#, 
and simultaneously deasserts the STP_PCI# signal. 


LPC Devices and CLKRUN# 


If an LPC device (of any type) needs the 33 MHz PCI clock, such as for LPC DMA or LPC 
serial interrupt, then it can assert CLKRUN#. Note that LPC devices running DMA or bus 
master cycles will not need to assert CLKRUN#, since the ICH9 asserts it on their 
behalf. 


The LDRQ# inputs are ignored by the |CH9 when the PCI clock is stopped to the LPC 
devices in order to avoid misinterpreting the request. The ICH9 assumes that only one 
more rising PCI clock edge occurs at the LPC device after the assertion of STP_PCI#. 
Upon deassertion of STP_PCI#, the ICH9 assumes that the LPC device receives its first 
clock rising edge corresponding to the |CH9’s second PCI clock rising edge after the 
deassertion. 
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Sleep States 


Sleep State Overview 


The ICH9 directly supports different sleep states (S1-S5), which are entered by setting 
the SLP_EN bit, or due to a Power Button press. The entry to the Sleep states is based 
on several assumptions: 


« Entry to a Cx state is mutually exclusive with entry to a Sleep state. This is because 
the processor can only perform one register access at a time. A request to Sleep 
always has higher priority than throttling. 

¢ Prior to setting the SLP_EN bit, the software turns off processor-controlled 
throttling. Note that thermal throttling cannot be disabled, but setting the SLP_EN 
bit disables thermal throttling (since S1-S5 sleep state has higher priority). 

*« The G3 state cannot be entered via any software mechanism. The G3 state 
indicates a complete loss of power. 


Initiating Sleep State 


Sleep states (S1-S5) are initiated by: 


¢« Masking interrupts, turning off all bus master enable bits, setting the desired type 
in the SLP_TYP field, and then setting the SLP_EN bit. The hardware then attempts 
to gracefully put the system into the corresponding Sleep state. 

e Pressing the PWRBTN# Signal for more than 4 seconds to cause a Power Button 
Override event. In this case the transition to the S5 state is less graceful, since 
there are no dependencies on observing Stop-Grant cycles from the processor or 
on clocks other than the RTC clock 

« Assertion of the THRMTRIP# signal will cause a transition to the S5 state. This can 
occur when system is in SO or S1 state. 


Sleep Types 
S1 Intel® 1CH9 asserts the STPCLK# signal. This lowers the processor’s power 
consumption. No snooping is possible in this state. 
ICH9 asserts SLP_S3#. The SLP_S3# signal controls the power to non-critical 
$3 circuits. Power is only retained to devices needed to wake from this sleeping 
state, as well as to the memory. 


ICH9 asserts SLP_S3# and SLP_S4#. The SLP_S4# signal shuts off the power to 
the memory subsystem. Only devices needed to wake from this state should be 
powered. 


Same power state as S4. |CH9 asserts SLP_S3#, SLP_S4# and SLP_S5#. 


Exiting Sleep States 





Sleep states (S1-S5) are exited based on Wake events. The Wake events forces the 
system to a full on state (SO), although some non-critical subsystems might still be 
shut off and have to be brought back manually. For example, the hard disk may be shut 
off during a sleep state, and have to be enabled via a GPIO pin before it can be used. 


Upon exit from the |CH9-controlled Sleep states, the WAK_STS bit is set. The possible 
causes of Wake Events (and their restrictions) are shown in Table 5-31. 


(Mobile Only) If the BATLOW# signal is asserted, |CH9 does not attempt to wake from 
an S1-S5 state, even if the power button is pressed. This prevents the system from 
waking when the battery power is insufficient to wake the system. Wake events that 
occur while BATLOW# is asserted are latched by the ICH9, and the system wakes after 
BATLOW# is deasserted. 
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Table 5-31. Causes of Wake Events 


States Can 
Cause Wake From How Enabled 
S1-S5 a : 
RTC Alarm Set RTC_EN bit in PM1_EN register 
(Note 1) = - 


Power Button $1-S5 Always enabled as Wake event. (Note 2). 


GPEO_EN register 
: $1-S5 Note: GPI’s that are in the core well are not capable of 
GPI[0:15] . . 
(Note 1) waking the system from sleep states when the core well is 
not powered. 
Set USB1_EN, USB 2_EN, USB3 EN, USB4_EN, USB5_EN, 
Casi wae S1-S4 and USB6_EN bits in GPEO_EN register 
S1-S5 Will use PME#. Wake enable set with LAN logic. 


S$1-S5 a ‘ 
RI # (Note 1) Set RI_EN bit in GPEO_EN register 
Intel® High Event sets PME_BO_STS bit; PM_BO_EN must be enabled. 
Sere F $1-S5 Can not wake from S5 state if it was entered due to power 
Definition Audio , ' 
failure or power button override. 


; $1-S5 _ ; 
Primary PME# (Note 1 PME_BO_EN bit in GPEO_EN register 


Secondary PME# $1-S5 Set PME_EN bit in GPEO_EN register. 
PCI_EXP_WAKE# $1-S5 PCI_EXP_WAKE bit (Note 3) 


) 
PCI_EXP PME S1 Must use the PCI Express* WAKE# pin rather than messages 
Message for wake from S3,S4, or S5. 
SMBALERT# $1-S5 Always enabled as Wake event 


Wake/SMI# command always enabled as a Wake event. 
SMBus Slave Wake S1-S5 Note: SMBus Slave Message can wake the system from S1- 
Message (01h) S5, as well as from S5 due to Power Button Override. (Note 





2). 
SMBus Host Notif HOST_NOTIFY_WKEN bit SMBus Slave Command register. 
ony $1-S5 Reported in the SMB_WAK_STS bit in the GPEO_STS 
message received : = = = 
register. 
ME None Meakenie S1-S5 Always enabled as Wake event. (Note 2). 
Wake 
NOTES: 
1. This is a wake event from S5 only if the sleep state was entered by setting the SLP_EN and 
SLP_TYP bits via software, or if there is a power failure. 
2. If in the S5 state due to a power button override or THRMTRIP#, the possible wake events 


are due to Power Button, Hard Reset Without Cycling (See Command Type 3 in 
Table 5-53), Hard Reset System (See Command Type 4 in Table 5-53), Wake SMBus Slave 
Message (01h) and ME initiated non-maskable wake. 

3. When the WAKE#¥ pin is active and the PCI Express device is enabled to wake the system, 
the ICH9 will wake the platform. 
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It is important to understand that the various GPlIs have different levels of functionality 
when used as wake events. The GPls that reside in the core power well can only 
generate wake events from sleep states where the core well is powered. Also, only 
certain GPls are “ACPI Compliant,” meaning that their Status and Enable bits reside in 
ACPI I/O space. Table 5-32 summarizes the use of GPIs as wake events. 


GPI =o Events 
= 





; ACPI 


The latency to exit the various Sleep states varies greatly and is heavily dependent on 
power supply design, so much so that the exit latencies due to the ICH9 are 
insignificant. 


PCI Express* WAKE# Signal and PME Event Message 


PCI Express ports can wake the platform from any sleep state (S1, S3, S4, or S5) using 
the WAKE# pin. WAKE# is treated as a wake event, but does not cause any bits to go 
active in the GPE_STS register. 


PCI Express ports and the (G)MCH (via DMI) have the ability to cause PME using 
messages. When a PME message is received, |CH9 will set the PCI_EXP_STS bit. 


Sx-G3-Sx, Handling Power Failures 


Depending on when the power failure occurs and how the system is designed, different 
transitions could occur due to a power failure. 


The AFTER_G3 bit provides the ability to program whether or not the system should 
boot once power returns after a power loss event. If the policy is to not boot, the 
system remains in an S5 state (unless previously in S4). There are only three possible 
events that will wake the system after a power failure. 


1. PWRBTN#: PWRBTN# is always enabled as a wake event. When RSMRST# is low 
(G3 state), the PWRBTN_STS bit is reset. When the ICH9 exits G3 after power 
returns (RSMRST# goes high), the PWRBTN# signal is already high (because Vcc- 
standby goes high before RSMRST# goes high) and the PWRBTN_STS bit is 0. 


2. RI #: RI# does not have an internal pull-up. Therefore, if this signal is enabled as a 
wake event, it is important to keep this signal powered during the power loss 
event. If this signal goes low (active), when power returns the RI_STS bit is set and 
the system interprets that as a wake event. 


3. RTC Alarm: The RTC_EN bit is in the RTC well and is preserved after a power loss. 
Like PWRBTN_STS the RTC_STS bit is cleared when RSMRST# goes low. 


The ICH9 monitors both PWROK and RSMRST# to detect for power failures. If PWROK 
goes low, the PWROK_FLR bit is set. If RSMRST# goes low, PWR_FLR is set. 


Although PME_EN is in the RTC well, this signal cannot wake the system after a power 
loss. PME_EN is cleared by RTCRST#, and PME_STS is cleared by RSMRST#. 
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Thermal Management 


The ICH9 has mechanisms to assist with managing thermal problems in the system. 


THRM# Signal 


The THRM# signal is used as a status input for a thermal sensor. Based on the THRM# 
signal going active, the |CH9 generates an SMI# or SCI (depending on SCI_EN). 


If the THRM_POL bit is set low, when the THRM# signal goes low, the THRM_STS bit 
will be set. This is an indicator that the thermal threshold has been exceeded. If the 

THRM_EN bit is set, then when THRM_STS goes active, either an SMI# or SCI will be 
generated (depending on the SCI_EN bit being set). 


The power management software (BIOS or ACPI) can then take measures to start 
reducing the temperature. Examples include shutting off unwanted subsystems, or 
halting the processor. 


By setting the THRM_POL bit to high, another SMI# or SCI can optionally be generated 
when the THRM# signal goes back high. This allows the software (BIOS or ACPI) to 
turn off the cooling methods. 


THRM# assertion does not cause a TCO event message in S3 or S4. The level of the 
signal is not reported in the heartbeat message. 


Software Initiated Passive Cooling 
This mode is initiated by software setting the THTL_EN or FORCE_THTL bits. 


Software sets the THTL_DTY or THRM_DTY bits to select throttle ratio and THTL_EN or 
FORCE_THTL bit to enable the throttling. 


Throttling results in STPCLK# active for a minimum time of 12.5% and a maximum of 
87.5%. The period is 1024 PCI clocks. Thus, the STPCLK# signal can be active for as 
little as 128 PCI clocks or as much as 896 PCI clocks. The actual slowdown (and 
cooling) of the processor depends on the instruction stream, because the processor is 
allowed to finish the current instruction. Furthermore, the ICH9 waits for the STOP- 
GRANT cycle before starting the count of the time the STPCLK# signal is active. 
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THRM# Override Software Bit 


The FORCE_THTL bit allows the BIOS to force passive cooling, independent of the ACPI 
software (which uses the THTL_EN and THTL_DTY bits). If this bit is set, the ICH9 
starts throttling using the ratio in the THRM_DTY field. 


When this bit is cleared the |CH9 stops throttling, unless the THTL_EN bit is set 
(indicating that ACPI software is attempting throttling). 


If both the THTL_EN and FORCE_THTL bits are set, then the ICH should use the duty 
cycle defined by the THRM_DTY field, not the THTL_DTY field. 


Active Cooling 


Active cooling involves fans. The GPIO signals from the ICH9 can be used to turn on/off 
a fan. 


Event Input Signals and Their Usage 


The ICH9 has various input signals that trigger specific events. This section describes 
those signals and how they should be used. 


PWRBTN# (Power Button) 


The ICH9 PWRBTN# signal operates as a “Fixed Power Button” as described in the 
Advanced Configuration and Power Interface, Version 2.0b. PWRBTN# signal has a 16 
ms de-bounce on the input. The state transition descriptions are included in Table 5-34. 
Note that the transitions start as soon as the PWRBTN# is pressed (but after the 
debounce logic), and does not depend on when the Power Button is released. 


During the time that the SLP_S4# signal is stretched for the minimum assertion width 
(if enabled), the Power Button is not a wake event. Refer to Power Button Override 
Function section below for further detail. 


Transitions Due to Power Button 


reser Transition/ Action Comment 
State 


SMI# or SCI generated 
(depending on SCI_EN, 
PWRBTN# goes low PWRBTN_INIT_EN, 
PWRBTN_EN and 
GLB_SMI_EN) 


Software typically initiates a 
Sleep state 


$1-S5 PWRBTN# goes low Welle -velite itanal ions ie Standard wakeup 
SO state 
No effect since no power 
G PWRBTN# pr d Non 


PWRBTN# held low is a No dependence on processor 
Unconditional transition to 
for at least 4 (e.g., Stop-Grant cycles) or 
; S5 state 
consecutive seconds any other subsystem 
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Power Button Override Function 


If PWRBTN# is observed active for at least four consecutive seconds, the state machine 
unconditionally transitions to the G2/S5 state, regardless of present state (SO-S4), 
even if PWROK is not active. In this case, the transition to the G2/S5 state does not 
depend on any particular response from the processor (e.g., a Stop-Grant cycle), nor 
any similar dependency from any other subsystem. 


The PWRBTN# status is readable to check if the button is currently being pressed or 
has been released. The status is taken after the de-bounce, and is readable via the 
PWRBTN_LVL bit. 


The 4-second PWRBTN# assertion should only be used if a system lock-up has 
occurred. The 

4-second timer starts counting when the ICH9 is in a SO state. If the PWRBTN# signal 
is asserted and held active when the system is in a suspend state (S1-S5), the 
assertion causes a wake event. Once the system has resumed to the SO state, the 4- 
second timer starts. 


During the time that the SLP_S4# signal is stretched for the minimum assertion width 
(if enabled by D31:F0:A4h bit 3), the Power Button is not a wake event. As a result, it 
is conceivable that the user will press and continue to hold the Power Button waiting for 
the system to awake. Since a 4-second press of the Power Button is already defined as 
an Unconditional Power down, the power button timer will be forced to inactive while 
the power-cycle timer is in progress. Once the power-cycle timer has expired, the 
Power Button awakes the system. Once the minimum SLP_S4# power cycle expires, 
the Power Button must be pressed for another 4 to 5 seconds to create the Override 
condition to S5. 


Sleep Button 


The Advanced Configuration and Power Interface, Version 2.0b defines an optional 
Sleep button. It differs from the power button in that it only is a request to go from SO 
to S1-S4 (not S5). Also, in an S5 state, the Power Button can wake the system, but the 
Sleep Button cannot. 


Although the |CH9 does not include a specific signal designated as a Sleep Button, one 
of the GPIO signals can be used to create a “Control Method” Sleep Button. See the 
Advanced Configuration and Power Interface, Version 2.0b for implementation details. 


RI # (Ring I ndicator) 


The Ring Indicator can cause a wake event (if enabled) from the S1-S5 states. 

Table 5-35 shows when the wake event is generated or ignored in different states. If in 
the GO/S0/Cx states, the |CH9 generates an interrupt based on RI# active, and the 
interrupt will be set up as a Break event. 


Transitions Due to RI # Signal 





$1.65 RI# Active ° Lanes 
1 Wake Event 


Filtering/Debounce on RI# will not be done in ICH9. Can be in modem or external. 
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PME# (PCI Power Management Event) 


The PME# signal comes from a PCI device to request that the system be restarted. The 
PME# signal can generate an SMI#, SCI, or optionally a Wake event. The event occurs 
when the PME# signal goes from high to low. No event is caused when it goes from low 
to high. 


There is also an internal PME_BO bit. This is separate from the external PME# signal 
and can cause the same effect. 


SYS_RESET# Signal 


When the SYS_RESET# pin is detected as active after the 16 ms debounce logic, the 
ICH9 attempts to perform a “graceful” reset, by waiting up to 25 ms for the SMBus to 
go idle. If the SMBus is idle when the pin is detected active, the reset occurs 
immediately; otherwise, the counter starts. If at any point during the count the SMBus 
goes idle the reset occurs. If, however, the counter expires and the SMBus is still active, 
a reset is forced upon the system even though activity is still occurring. 


Once the reset is asserted, it remains asserted for 5 to 6 ms regardless of whether the 
SYSRESET# input remains asserted or not. It cannot occur again until SYS_RESET# 
has been detected inactive after the debounce logic, and the system is back to a full SO 
state with PLTRST# inactive. Note that if bit 3 of the CF9h I/O register is set then 
SYS_RESET# will result in a full power cycle reset. 


THRMTRI P# Signal 


If THRMTRIP# goes active, the processor is indicating an overheat condition, and the 
ICH9 immediately transitions to an S5 state. However, since the processor has 
overheated, it does not respond to the ICH9’s STPCLK# pin with a stop grant special 
cycle. Therefore, the |CH9 does not wait for one. Immediately upon seeing THRMTRIP# 
low, the |CH9 initiates a transition to the S5 state, drive SLP_S3#, SLP_S4#, SLP_S5# 
low, and set the CTS bit. The transition looks like a power button override. 


When a THRMTRIP# event occurs, the ICH9 will power down immediately without 
following the normal SO -> S5 path. The ICH9 will immediately drive SLP_S3#, 
SLP_S4#, and SLP_S5# low after sampling THRMTRIP# active. 


If the processor is running extremely hot and is heating up, it is possible (although very 
unlikely) that components around it, such as the ICH9, are no longer executing cycles 
properly. Therefore, if THRMTRIP# goes active, and the |CH9 is relying on state 
machine logic to perform the power down, the state machine may not be working, and 
the system will not power down. 


The ICH provides filtering for short low glitches on the THRMTRIP# signal in order to 
prevent erroneous system shut downs from noise. Glitches shorter than 25nsec are 
ignored. 


During boot, THRMTRIP# is ignored until SLP_S3#, PWROK, VRMPWRGD/VGATE, and 
PLTRST# are all ‘1’. During entry into a powered-down state (due to S3, S4, S5 entry, 
power cycle reset, etc.) THRMTRIP# is ignored until either SLP_S3# = 0, or PWROK = 
0, or VRMPWRGD/VGATE = 0. 


A thermal trip event will: 


*« Set the AFTERG3_EN bit 

¢ Clear the PWRBTN_STS bit 

¢ Clear all the GPEO_EN register bits 

¢« Clear the SMB_WAK_STS bit only if SMB_SAK_STS was set due to SMBus slave 
receiving message and not set due to SMBAlert 
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5.13.10 ALT Access Mode 


Before entering a low power state, several registers from powered down parts may 
need to be saved. In the majority of cases, this is not an issue, as registers have read 
and write paths. However, several of the ISA compatible registers are either read only 
or write only. To get data out of 

write-only registers, and to restore data into read-only registers, the |CH9 implements 
an ALT access mode. 


If the ALT access mode is entered and exited after reading the registers of the |CH9 
timer (8254), the timer starts counting faster (13.5 ms). The following steps listed 
below can cause problems: 


1. BIOS enters ALT access mode for reading the |CH9 timer related registers. 
2. BIOS exits ALT access mode. 


3. BIOS continues through the execution of other needed steps and passes control to 
the operating system. 


After getting control in step #3, if the operating system does not reprogram the system 
timer again, the timer ticks may be happening faster than expected. For example DOS 
and its associated software assume that the system timer is running at 54.6 ms and as 
a result the time-outs in the software may be happening faster than expected. 


Operating systems (e.g., Microsoft Windows* 98, Windows* 2000, and Windows NT*) 
reprogram the system timer and therefore do not encounter this problem. 


For some other loss (e.g., Microsoft MS-DOS*) the BIOS should restore the timer back 
to 54.6 ms before passing control to the operating system. If the BIOS is entering ALT 
access mode before entering the suspend state it is not necessary to restore the timer 
contents after the exit from ALT access mode. 
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5.13.10.1 Write Only Registers with Read Paths in ALT Access Mode 
The registers described in Table 5-36 have read paths in ALT access mode. The access 


number field in the table indicates which register will be returned per access to that 
port. 


Table 5-36. Write Only Registers with Read Paths in ALT Access Mode (Sheet 1 of 2) 


Restore Data Restore Data 


1/0 
Addr 


Timer Counter 0 status, bits 
[5:0] 


DMA Chan 0 base address 1 

low byte 

DMA Chan 0 base address Timer Counter 0 base count 
‘ 2 

high byte low byte 

DMA Chan 0 base count low Timer Counter 0 base count 

3 : 

byte high byte 

DMA Chan 0 base count high Oh Timer Counter 1 base count 

byte low byte 


DMA Chan 1 base address Timer Counter 1 base count 
5 : 
low byte high byte 


DMA Chan 1 base address 
high byte 


Timer Counter 2 base count 
low byte 

J Timer Counter 2 base count 
high byte 


DMA Chan 1 base count low 

byte 
Timer Counter 1 status, bits 
[5:0] 


4 
4 


DMA Chan 2 base address 
42h 
low byte 
DMA Chan 2 base address 70h 
high byte 
DMA Chan 2 base count low 
byte 
Cc 2 
Cc 


Timer Counter 2 status, bits 
[5:0] 


Bit 7 = NMI Enable, 
Bits [6:0] = RTC Address 


DMA Chan 5 base address 
low byte 

DMA Chan 5 base address 
high byte 

DMA Chan 5 base count low 
byte 


DMA Chan 3 base address DMA Chan 5 base count 
high byte high byte 


DMA Chan 3 base count low DMA Chan 6 base address 
byte low byte 
0 C 2 
DMA Chan 3 base count high DMA Chan 6 base address 
2 2 , 
byte high byte 


4 
DMA Chan 2 base count high 
byte 
DMA Chan 3 base address 
low byte 
6 2 
8 


h 
h 
h 


1 
2 
1 
2 
1 
2 
1 
2 
1 
2 
1 
2 
1 
2 
al 


00h 
Olh 
02h 
03h 
04h 

1 
05h 

2 

1 
06h 

2 

1 

7h 


DMA Chan 1 base count high 
lh 
byte 
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Table 5-36. Write Only Registers with Read Paths in ALT Access Mode (Sheet 2 of 2) 


1/0 # of 
Addr | Rds 
DMA Chan 0-3 Command2 1 DMA Chan 6 base count low 
byte 
) DMA Chan 6 base count 
high byte 
1 DMA Chan 7 base address 
low byte 
> DMA Chan 7 base address 
high byte 
1 DMA Chan 7 base count low 
byte 


h 2 
) DMA Chan 7 base count 
high byte 
| 


1 = 
Cc 
2 DMA Chan 0-3 Request 


DMA Chan 0 Mode: 
Bits(1:0) = 00 


DMA Chan 1 Mode: 
Bits(1:0) = 01 
DMA Chan 2 Mode: 
Bits(1:0) = 10 


DMA Chan 3 Mode: Bits(1:0 
=11. 


PIC |CW2 of Master controller 
Ea 
| 
| 8 | 
es 


A 
C 
E 


C 
Cc 
) 


1 DMA Chan 4-7 Command? 
2 DMA Chan 4-7 Request 


DMA Chan 4 Mode: 
Bits(1:0) = 00 


DMA Chan 5 Mode: 
Bits(1:0) = 01 


DMA Chan 6 Mode: 
Bits(1:0) = 10 


DMA Chan 7 Mode: 
Bits(1:0) = 11. 


2 PIC |CW3 of Master controller 


3 PIC |CW4 of Master controller 
PIC OCW1 of Master D 
controller? 

5 PIC OCW2 of Master 
controller 
PIC OCW3 of Master 
controller 


7 PIC |CW2 of Slave controller 
PIC |CW3 of Slave controller 
PIC |CW4 of Slave controller 


PIC OCW1 of Slave 


1 
controller? 


0 
PIC OCW2 of Slave controller 
PIC OCW3 of Slave controller 





NOTES: 
1. The OCW1 register must be read before entering ALT access mode. 
2. Bits 5, 3, 1, and O return 0. 
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Table 5-37. 


5.13.10.3 


Table 5-38. 
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PIC Reserved Bits 


Many bits within the PIC are reserved, and must have certain values written in order for 
the PIC to operate properly. Therefore, there is no need to return these values in ALT 
access mode. When reading PIC registers from 20h and AOh, the reserved bits shall 
return the values listed in Table 5-37. 


PIC Reserved Bits Return Values 


PIC Reserved Bits Value Returned 


ICW2(2:0) 
ICW4(7:5) 


ICW4(0) 
OCW2(4:3) 
OCW3(7) 


OCcW3(5) Reflects bit 6 


Read Only Registers with Write Paths in ALT Access Mode 





The registers described in Table 5-38 have write paths to them in ALT access mode. 
Software restores these values after returning from a powered down state. These 
registers must be handled special by software. When in normal mode, writing to the 
base address/count register also writes to the current address/count register. 
Therefore, the base address/count must be written first, then the part is put into ALT 
access mode and the current address/count register is written. 


Register Write Accesses in ALT Access Mode 


1/ O Address Register Write Value 


08h DMA Status Register for channels 0-3. 
DOh DMA Status Register for channels 4-7. 
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System Power Supplies, Planes, and Signals 


Power Plane Control with SLP_S3#, SLP_S4#, SLP_S5# and SLP_M# 


The SLP_S3# output signal can be used to cut power to the system core supply, since it 
only goes active for the Suspend-to-RAM state (typically mapped to ACPI S3). Power 
must be maintained to the |CH9 suspend well, and to any other circuits that need to 
generate Wake signals from the Suspend-to-RAM state. During S3 (Suspend-to-RAM) 
all signals attached to powered down plans will be tri-stated or driven low, unless they 
are pulled via a pull-up resistor. 


Cutting power to the core may be done via the power supply, or by external FETs on the 
motherboard. 


The SLP_S4# or SLP_S5# output signal can be used to cut power to the system core 
supply, as well as power to the system memory, since the context of the system is 
saved on the disk. Cutting power to the memory may be done via the power supply, or 
by external FETs on the motherboard. 


The SLP_S4# output signal is used to remove power to additional subsystems that are 
powered during SLP_S3#. 


SLP_S5# output signal can be used to cut power to the system core supply, as well as 
power to the system memory, since the context of the system is saved on the disk. 
Cutting power to the memory may be done via the power supply, or by external FETs 
on the motherboard. 


SLP_M# output signal can be used to cut power to the Controller Link, Clock chip and 
SPI flash on a platform that supports Intel® AMT (Digital Office only) or ASF. 


SLP_S4# and Suspend-To-RAM Sequencing 


The system memory suspend voltage regulator is controlled by the Glue logic. The 

SLP_S4# signal should be used to remove power to system memory rather than the 
SLP_S5# signal. The SLP_S4# logic in the I|CH9 provides a mechanism to fully cycle 
the power to the DRAM and/or detect if the power is not cycled for a minimum time. 


To utilize the minimum DRAM power-down feature that is enabled by the SLP_S4# 
Assertion Stretch Enable bit (D31:F0:A4h bit 3), the DRAM power must be controlled 
by the SLP_S4# signal. 
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5.13.11.4 
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Note: 


5.13.11.6 
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PWROK Signal 


The PWROK input should go active no sooner than 99 ms after the core supply voltages 
becoming valid. PWROK must not glitch, even if RSMRST# is low. 


ry 


SYSRESET# is recommended for implementing the system reset button. This saves 
external logic that is needed if the PWROK input is used. Additionally, it allows for 
better handling of the SMBus and processor resets, and avoids improperly 
reporting power failures. 


2. PWROK and RSMRST# are sampled using the RTC clock. Therefore, low times that 
are less than one RTC clock period may not be detected by the |CH9. 


3. In the case of true PWROK failure, PWROK will go low before VRMPWRGD. 


4. When PWROK goes inactive, a host power cycle reset will occur. A host power cycle 
is the assertion of SLP_S3#, SLP_S4#, and SLP_S5#, and the deassertion of these 
signals 3-5 seconds later. The Management Engine remains powered throughout 
this cycle. 


CPUPWRGD Signal 


This signal is connected to the processor’s VRM via the VRMPWRGD signal and is 
internally AND’d with the PWROK signal that comes from the system power supply. 


VRMPWRGD Signal 


VRMPWRGBD is an input from the regulator indicating that all of the outputs from the 
regulator are on and within specification. Platforms that use the VRMPWRGD signal to 
start the clock chip PLLs assume that it asserts milliseconds before PWROK in order to 
provide valid clocks in time for the PWROK rising. 


When VRMPWRGD goes inactive, a host power cycle reset will occur. A host power cycle 
is the assertion of SLP_S3#, SLP_S4#, and SLP_S5#, and the deassertion of these 


signals 3-5 seconds later. The Management Engine remains powered throughout this 
cycle. 


BATLOW# (Battery Low) (Mobile Only) 


The BATLOW# input can inhibit waking from S3, S4, and S5 states if there is not 
sufficient power. It also causes an SMI # if the system is already in an SO state. 
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5.13.12 Clock Generators 


intel. 


The clock generator is expected to provide the frequencies shown in Table 5-39. 


Table 5-39. Intel® I1CH9 Clock Inputs 


Clock 
Domain 


Main Clock 
Generator 


Main Clock 
Generator 


100 MHz 

ATA_CLK 
Differential 
100 MHz 

DMI_CLK 
Differential 


33 MHz Main Clock 


Pelehs Generator 


Main Clock 


oi Generator 


48.000 MHz 


CLK14 14.318 MHz 


5 to 
62.5 MHz 


Main Clock 
Generator 


Platform 
LAN 
Connect 


GLAN_CLK 





Used by SATA controller. Stopped in S3 - S based on 
SLP_S3# assertion. 


Used by DMI and PCI Express*. Stopped in S3 - S5 
based on SLP_S3# assertion. 


Desktop: Free-running PCI Clock to |CH9. Stopped in 
S3 - S5 based on SLP_S3# assertion. 

Mobile: Free-running (not affected by STP_PCI# PCI 

Clock to ICH9. This is not the system PCI clock. This 
clock must keep running in SO while the system PCI 

clock may stop based on CLKRUN# protocol. Stopped 
in S3 - S5 based on SLP_S3# assertion. 


Used by USB controllers and Intel® High Definition 
Audio controller. Stopped in S3 - S5 based on 
SLP_S3# assertion. 


Used by ACPI timers. Stopped in S3 - S5 based on 
SLP_S3# assertion. 


LAN Connect Interface and Gigabit LAN Connect 
Interface. Control policy is determined by the clock 
source. 





5.13.12.1 Clock Control Signals from Intel® |CH9 to Clock 


Synthesizer (Mobile Only) 


The clock generator is assumed to have direct connect from the following I CH9 signals: 
¢ STP_CPU#: Stops processor clocks in C3 and C4 states 
¢ STP_PCI#: Stops system PCI clocks (not the ICH9 free-running 33 MHz clock) due 


to CLKRUN# protocol 


¢ SLP_S3#: Expected to drive clock chip PWRDOWN (through inverter), to stop 


clocks in S3 to S5. 
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5.13.14 


Note: 
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Legacy Power Management Theory of Operation 


Instead of relying on ACPI software, legacy power management uses BIOS and various 
hardware mechanisms. The scheme relies on the concept of detecting when individual 
subsystems are idle, detecting when the whole system is idle, and detecting when 
accesses are attempted to idle subsystems. 


However, the operating system is assumed to be at least APM enabled. Without APM 
calls, there is no quick way to know when the system is idle between keystrokes. The 
ICH9 does not support burst modes. 


APM Power Management (Desktop Only) 


The |CH9 has a timer that, when enabled by the 1MIN_EN bit in the SMI Control and 
Enable register, generates an SMI# once per minute. The SMI handler can check for 
system activity by reading the DEVACT_STS register. If none of the system bits are set, 
the SMI handler can increment a software counter. When the counter reaches a 
sufficient number of consecutive minutes with no activity, the SMI handler can then put 
the system into a lower power state. 


If there is activity, various bits in the DEVACT_STS register will be set. Software clears 
the bits by writing a 1 to the bit position. 


The DEVACT_STS register allows for monitoring various internal devices, or Super I/O 
devices (SP, PP, FDC) on LPC or PCI, keyboard controller accesses, or audio functions 
on LPC or PCI. Other PCI activity can be monitored by checking the PCI interrupts. 


Mobile APM Power Management (Mobile Only) 


In mobile systems, there are additional requirements associated with device power 
management. To handle this, the |CH9 has specific SMI# traps available. The following 
algorithm is used: 


1. The periodic SMI # timer checks if a device is idle for the require time. If so, it puts 
the device into a low-power state and sets the associated SMI # trap. 


2. When software (not the SMI# handler) attempts to access the device, a trap occurs 
(the cycle does not really go to the device and an SMI# is generated). 


3. The SMI# handler turns on the device and turns off the trap. 


The SMI# handler exits with an I/O restart. This allows the original software to 
continue. 


Reset Behavior 


When a reset is triggered, the ICH will send a warning message to the MCH to allow the 
MCH to attempt to complete any outstanding memory cycles and put memory into a 
safe state before the platform is reset. When the MCH is ready, it will send an 
acknowledge message to the ICH. Once the message is received the ICH asserts 
PLTRST#. 


The ICH does not require an acknowledge message from the MCH to trigger PLTRST#. 
A global reset will occur after 4 seconds if an acknowledge from the MCH is not 
received. 


When the ICH causes a reset by asserting PLTRST# its output signals will go to their 
reset states as defined in Chapter 3. 
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A reset in which the host platform is reset and PLTRST# is asserted is called a Host 
Reset or Host Partition Reset. Depending on the trigger a host reset may also result in 
power cycling see Table 5-40 for details. If a host reset is triggered and the ICH times 
out before receiving an acknowledge message from the MCH a Global Reset with power 
cycle will occur. A reset in which the host and ME partitions of the platform are reset is 
called a Global Reset. 


The following table shows the various reset triggers: 


Table 5-40. Causes of Host and Global Resets 


Host Reset 
without Host Reset Global 


Trigger with Power | Reset with 
Power Cycle 


Write of OEh to CF9h Register when Global Reset 
bit = Ob 


Write of 06h to CF9h Register when Global Reset 
bit = Ob 


Write of 06h or OEh to CF9h register when Global 
Reset bit = 1b 


SYS_RESET# Asserted and CF9h bit 3 = 0 
SYS_RESET# Asserted and CF9h bit 3 = 1 


SMBus Slave Message received for Reset with 
Power Cycle 


SMBus Slave Message received for Reset without 
Power Cycle 


TCO Watchdog timer reaches zero two times 


Power Failure: PWROK signal or VRMPWROK signal 
goes inactive or RSMRST# asserts 


Special shutdown cycle from CPU causes CF9h-like 
PLTRST# and CF9h Global Reset bit = 1 


Special shutdown cycle from CPU causes CF9h-like 
PLTRST# and CF9h bit 3 = 1 


Special Shutdown Cycle from CPU causes CF9h- 
like PLTRST# and CF9h Global Reset bit = 0 


ME Triggered Host Reset without power cycle [No 


ME Triggered Host Reset with power cycle Yes No (Note 1) 
ME Initiated Host Reset with power down Yes (Note 3) | No (Note 1) 





NOTES: 

1. Trigger will result in Global Reset with power cycle if the acknowledge message is not 
received by the ICH. 

2. ICH does not send warning message to MCH, reset occurs without delay. 

3. ICH waits for enabled wake event to complete reset. 
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5.14.1.1 


5.14.1.2 
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System Management (D31:F0) 


The ICH9 provides various functions to make a system easier to manage and to lower 
the Total Cost of Ownership (TCO) of the system. In addition, |CH9 provides integrated 
ASF Management support, requires use of SPI Flash and Management Engine firmware. 
Features and functions can be augmented via external A/D converters and GPIO, as 
well as an external microcontroller. 
The following features and functions are supported by the ICH9: 
¢ Processor present detection 
— Detects if processor fails to fetch the first instruction after reset 
¢ Various Error detection (such as ECC Errors) indicated by host controller 
— Can generate SMI#, SCI, SERR, NMI, or TCO interrupt 
¢ Intruder Detect input 
— Can generate TCO interrupt or SMI# when the system cover is removed 
— INTRUDER# allowed to go active in any power state, including G3 
¢« Detection of bad BIOS Flash (FWH or Flash on SPI) programming 


— Detects if data on first read is FFh (indicates that BIOS flash is not 
programmed) 


Ability to hide a PCI device 


— Allows software to hide a PCI device in terms of configuration space through 
the use of a device hide register (See Section 10.1.75) 


Voltage ID from the processor can be read via GPI signals. ASF functionality with the 
integrated |CH9 ASF controller requires a correctly configured system, including an 
appropriate component of the ICH9 (see Section 1.3), (G)MCH with Management 
Engine, Management Engine Firmware, system BIOS support, and appropriate Platform 
LAN Connect Device. 


Theory of Operation 


The System Management functions are designed to allow the system to diagnose failing 
subsystems. The intent of this logic is that some of the system management 
functionality can be provided without the aid of an external microcontroller. 


Detecting a System Lockup 


When the processor is reset, it is expected to fetch its first instruction. If the processor 
fails to fetch the first instruction after reset, the TCO timer times out twice and the 
ICH9 asserts PLTRST#. 


Handling an Intruder 


The ICH9 has an input signal, INTRUDER#, that can be attached to a switch that is 
activated by the system’s case being open. This input has a two RTC clock debounce. If 
INTRUDER# goes active (after the debouncer), this will set the INTRD_DET bit in the 
TCO_STS register. The INTRD_SEL bits in the TCO_CNT register can enable the ICH9 to 
cause an SMI# or interrupt. The BIOS or interrupt handler can then cause a transition 
to the S5 state by writing to the SLP_EN bit. 


The software can also directly read the status of the INTRUDER# signal (high or low) by 


clearing and then reading the INTRD_DET bit. This allows the signal to be used as a GPI 
if the intruder function is not required. 
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Note: 


Note: 


5.14.1.3 


5.14.1.4 


5.14.2 


5.14.2.1 


Note: 


If the INTRUDER# signal goes inactive some point after the INTRD_DET bit is written 
as a 1, then the INTRD_DET signal will go to a 0 when INTRUDER# input signal goes 
inactive. Note that this is slightly different than a classic sticky bit, since most sticky 
bits would remain active indefinitely when the signal goes active and would 
immediately go inactive when a 1 is written to the bit. 


The INTRD_DET bit resides in the |CH9’s RTC well, and is set and cleared 
synchronously with the RTC clock. Thus, when software attempts to clear INTRD_DET 
(by writing a 1 to the bit location) there may be as much as two RTC clocks (about 65 
us) delay before the bit is actually cleared. Also, the INTRUDER# signal should be 
asserted for a minimum of 1 ms to ensure that the INTRD_DET bit will be set. 


If the INTRUDER# signal is still active when software attempts to clear the INTRD_DET 
bit, the bit remains set and the SMI is generated again immediately. The SMI handler 
can clear the INTRD_SEL bits to avoid further SMIs. However, if the INTRUDER# signal 
goes inactive and then active again, there will not be further SMIs, since the 
INTRD_SEL bits would select that no SMI # be generated. 


Detecting |!mproper Firmware Hub Programming 


The ICH9 can detect the case where the BIOS flash is not programmed. This results in 
the first instruction fetched to have a value of FFh. If this occurs, the ICH9 sets the 
BAD_BIOS bit. The BIOS flash may reside in FWH or flash on the SPI bus. 


Heartbeat and Event Reporting via SMLink/ SMBus 


Heartbeat and event reporting via SMLink/SMBus is no longer supported. The AMT logic 
in |CH9 (Digital Office Only) can be programmed to generate an interrupt to the 
Management Engine when an event occurs. The Management Engine will poll the TCO 
registers to gather appropriate bits to send the event message to the Gigabit Ethernet 
controller, if Management Engine is programmed to do so. 


The Management Engine is responsible for sending ASF 2.0 messages if programmed to 
do so. 


In Advanced TCO BMC mode, the external micro-controller (BMC) accesses the TCO 
info through SMBus. 


TCO Modes 


TCO Legacy/ Compatible Mode 


In TCO Legacy/Compatible mode the Intel Management Engine and Intel AMT logic 
(Digital Office only) and AMT SMBus controllers are disabled. To enable Legacy/ 
Compatible TCO mode the TCOMODE bit 7 in the ICHSTRPO register in the SPI device 
must be 0. 


SMBus and SMLink may be tied together externally, if a device has a single SMBus 
interface and needs access to the TCO slave and be visisble to the host SMBus 
controller. 
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Figure 5-6. TCO Legacy/ Compatible Mode SMBus Configuration 


Table 5-41. 
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In TCO Legacy/Compatible mode the Intel |CH9 can function directly with the 
integrated Gigabit Ethernet controller or equivalent external LAN controller to report 
messages to a network management console without the aid of the system processor. 
This is crucial in cases where the processor is malfunctioning or cannot function due to 
being in a low-power state. Table 5-41 includes a list of events that will report 
messages to the network management console. 


Event Transitions that Cause Messages 


[evens [assetinz[bewssertane [commen 
INTRUDER# pin Must be in “S1 or hung SO” state 


Must be in “S1 or hung SO” state. Note 
: that the THRM#¥ pin is isolated when 
BARNES DIN be ves the core power is off, thus preventing 


this event in S3-S5. 


Wetencod Timer yes no (NA) “S1 or hung SO” state entered 
Expired 

GPIO[11]/ ou ” 
BATLOW# ou ” 


CPU_PWR_FLR “S1 or hung SO” state entered 


NOTE: The GPIO11/SMBALERT#¥ pin will trigger an event message (when enabled by the 
GPIO11_ALERT_DISABLE bit) regardless of whether it is configured as a GPI or not. 
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5.14.2.2 Advanced TCO Mode 


Intel |CH9 supports two modes of Advanced TCO. Intel® Active Management 
Technology mode (Digital Office only) and BMC mode. To enable Advance TCO mode 
(AMT or BMC mode) the TCOMODE bit 7 in the I|CHSTRPO register in the SPI device 
must be 1. 


5.14.2.2.1 Advanced TCO Intel® Active Management Technology mode (Digital Office 
Only) 


In this mode, AMT SMBus Controller 1, Host SMBus and SMLink are connected together 
internally. See Figure 5-7. This mode is enabled when the BMCMODE bit 15 in the 
ICHSTRPO register in the SPI device is 0. 


The AMT SMBus Controller 2 can be connected to either the SMBus pins or the SMLink 
pins by the MESM2SEL bit 23 in the |CHSTRPO register in the SPI device. The default is 
to have the AMT SMBus Controller 2 connected to SMLink. The AMT SMBus Controller 2 
has no connection to LINKALERT#. 


Figure 5-7. Advanced TCO Intel® AMT Mode SMBus/ SMLink Configuration 
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5.14.2.2.2 Advanced TCO BMC Mode 


In this mode, the external microcontroller (BMC) is connected to both SMLink and 
SMBus. The BMC communicates with Management Engine through AMT SMBus 
connected to SMLink. The host and TCO slave communicated with BMC through SMBus. 
See Figure 5-8. This mode is enabled when the BMCMODE bit 15 in the ICHSTRPO 
register in the SPI device is 1. 
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Figure 5-8. Advanced TCO BMC Mode SMBus/ SMLink Configuration 
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5.15.2 
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General Purpose I/ O (D31:F0) 


The ICH9 contains up to 61 General Purpose Input/Output (GPIO) signals. Each GPIO 
can be configured as an input or output signal. The number of inputs and outputs 
varies depending on |CH9 configuration. 


Power Wells 


Some GPIOs exist in the suspend power plane. Care must be taken to make sure GPIO 
signals are not driven high into powered-down planes. Some |CH9 GPIOs may be 
connected to pins on devices that exist in the core well. If these GPIOs are outputs, 
there is a danger that a loss of core power (PWROK low) or a Power Button Override 
event results in the ICH9 driving a pin to a logic 1 to another device that is powered 
down. 


SMI # and SCI Routing 


The routing bits for GPIO[0:15] allow an input to be routed to SMI# or SCI, or neither. 
Note that a bit can be routed to either an SMI# or an SCI, but not both. 
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5.15.3 


5.15.4 


5.15.4.1 


Figure 5-9. 


Triggering 


GPIO[1:15] have “sticky” bits on the input. Refer to the GPEO_STS register. As long as 
the signal goes active for at least 2 clock cycles, the |CH9 keeps the sticky status bit 
active. The active level can be selected in the GP_LVL register. If the system is in an SO 
or an S1 state, the GPI inputs are sampled at 33 MHz, so the signal only needs to be 
active for about 60 ns to be latched. In the S3-S5 states, the GPI inputs are sampled at 
32.768 kHz, and thus must be active for at least 61 microseconds to be latched. If the 
input signal is still active when the latch is cleared, it will again be set. Another edge 
trigger is not required. This makes these signals “level” triggered inputs. 


Serial POST Codes Over GPIO 


ICH9 adds the extended capability allowing system software to serialize POST or other 
messages on GPIO. This capability negates the requirement for dedicated diagnostic 
LEDs on the platform. Additionally, based on the newer BTX form factors, the PCI bus 
as a target for POST codes is increasingly difficult to support as the total number of PCI 
devices supported are decreasing. 


Theory of operation 


For the ICH9 generation POST code serialization logic will be shared with GPIO. These 
GPIOs will likely be shared with LED control offered by the Super |/O (SIO) component. 
The following reference diagram shows a likely configuration. 


Serial Post over GPIO Reference Circuit 


V_3P3_STBY 
ZN 








Note: The pull-up value is based on the brightness required. 





The anticipated usage model is that either the |CH9 or the SIO can drive a pin low to 
turn off an LED. In the case of the power LED, the SIO would normally leave its 
corresponding pin in a high-Z state to allow the LED to turn on. In this state, the |CH9 
can blink the LED by driving its corresponding pin low and subsequently tri-stating the 
buffer. 


An external optical sensing device can detect the on/off state of the LED. By externally 
post-processing the information from the optical device, the serial bit stream can be 
recovered. The hardware will supply a ‘sync’ byte before the actual data transmission 
to allow external detection of the transmit frequency. The frequency of transmission 
should be limited to 1 transition every lus to ensure the detector can reliably sample 
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the on/off state of the LED. To allow flexibility in pull-up resistor values for power 
optimization, the frequency of the transmission is programmable via the DRS field in 
the GP_SB_CMDSTS register (Section 13.10.6). 


The serial bit stream is Manchester encoded. This choice of transmission ensures that a 
transition will be seen on every clock. The 1 or 0 data is based on the transmission 
happening during the high or low phase of the clock. 


A simplified hardware/software register interface provides control and status 
information to track the activity of this block. Software enabling the serial blink 
capability should implement an algorithm referenced below to send the serialized 
message on the enabled GPIO. 


1. Read the Go/Busy status bit in the GP_SB_CMDSTS register and verify it is cleared. 
This will ensure that the GPIO is idled and a previously requested message is still 
not in progress. 


2. Write the data to serialize into the GP_SB_DATA register (Section 13.10.7). 


3. Write the DLS and DRS values into the GP_SB_CMDSTS register and set the Go bit. 
This may be accomplished using a single write. 


The reference diagram shows the LEDs being powered from the suspend supply. By 
providing a generic capability that can be used both in the main and the suspend power 
planes maximum flexibility can be achieved. A key point to make is that the ICH will not 
unintentionally drive the LED control pin low unless a serialization is in progress. 
System board connections utilizing this serialization capability are required to use the 
same power plane controlling the LED as the |CH9 GPIO pin. Otherwise, the |CH9 GPIO 
may float low during the message and prevent the LED from being controlled from the 
SIO. The hardware will only be serializing messages when the core power well is 
powered and the processor is operational. 


Care should be taken to prevent the ICH9 from driving an active ‘1’ on a pin sharing the 
serial LED capability. Since the SIO could be driving the line to 0, having the ICH drive 
a 1 would create a high current path. A recommendation to avoid this condition 
involves choosing a GPIO defaulting to an input. The GP_SER_BLINK register 

(Section 13.10.7) should be set first before changing the direction of the pin to an 
output. This sequence ensures the open-drain capability of the buffer is properly 
configured before enabling the pin as an output. 


Serial Message Format 


In order to serialize the data onto the GPIO, an initial state of high-Z is assumed. The 
SIO is required to have its LED control pin in a high-Z state as well to allow |CH9 to 
blink the LED (refer to the reference diagram). 


The three components of the serial message include the sync, data, and idle fields. The 
sync field is 7 bits of ‘1’ data followed by 1 bit of ‘0’ data. Starting from the high-Z state 
(LED on) provides external hardware a known initial condition and a Known pattern. In 
case one or more of the leading 1 sync bits are lost, the 1s followed by 0 provide a 
clear indication of ‘end of sync’. This pattern will be used to ‘lock’ external sampling 
logic to the encoded clock. 


The data field is shifted out with the highest byte first (MSB). Within each byte, the 
most significant bit is shifted first (MSb). 


The idle field is enforced by the hardware and is at least 2 bit times long. The hardware 
will not clear the Busy and Go bits until this idle time is met. Supporting the idle time in 
hardware prevents time-based counting in BIOS as the hardware is immediately ready 
for the next serial code when the Go bit is cleared. Note that the idle state is 

represented as a high-Z condition on the pin. If the last transmitted bit is a 1, returning 
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5.16 


Note: 


to the idle state will result in a final 0-1 transition on the output Manchester data. Two 
full bit times of idle correspond to a count of 4 time intervals (the width of the time 
interval is controlled by the DRS field). 


The following waveform shows a 1-byte serial write with a data byte of 5Ah. The 
internal clock and bit position are for reference purposes only. The Manchester D is the 
resultant data generated and serialized onto the GPIO. Since the buffer is operating in 
open-drain mode the transitions are from high-Z to 0 and back. 


Bit 7/6}5)4)/3/2)]1 0 
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Controller Link GPI Os (Digital Office Only) 


The following GPIOs can be used as Controller Link GPIOs: GPIO9/WOL_EN, GPIO10/ 
CLGPIO1 (Desktop)/SUS_PWR_ACK (Mobile), GP1O014/CLGPIO2 (Desktop)/ 
AC_PRESENT (Mobile), GPIO24/MEM_LED, GPIO60/CLGPIO4, GPIO57/CLGPIO5 and 
GPIO58/CLGPIO6. Controller Link GPIOs are only available on Intel® AMT or ASF 
enabled platforms with supporting Management Engine Firmware. Controller Link 
GPIOs are owned by the management engine and are configured by Management 
Engine firmware. When configured a a Controller Link GPIO the GPIO_USE_SEL bit is 
ignored. If the Controller Link GPIO is utilized in a platform, its associated GPIO 
functionality is no longer available to the host. If the Controller Link GPIO is not utilized 
in a platform, the signal can instead be used as its associated General Purpose I/O. 


SATA Host Controller (D31:F2, F5) 


The SATA function in the I|CH9 has three modes of operation to support different 
operating system conditions. In the case of Native IDE enabled operating systems, the 
ICH9 utilizes two controllers to enable all six ports of the bus. The first controller 
(Device 31: Function 2) supports ports 0 -3 and the second controller (Device 31: 
Function 5) supports ports 4 and 5. When using a legacy operating system, only one 
controller (Device 31: Function 2) is available that supports ports 0 - 3. In AHCI or 
RAID mode, only one controller (Device 31: Function 2) is utilized enabling all six ports. 


The MAP register, Section 15.1.29, provides the ability to share PCI functions. When 
sharing is enabled, all decode of I/O is done through the SATA registers. Device 31, 
Function 1 (IDE controller) is hidden by software writing to the Function Disable 
Register (D31, FO, offset F2h, bit 1), and its configuration registers are not used. 


The ICH9 SATA controllers feature six (desktop only) / four (mobile only) sets of 
interface signals (ports) that can be independently enabled or disabled (they cannot be 
tri-stated or driven low). Each interface is supported by an independent DMA controller. 


The ICH9 SATA controllers interact with an attached mass storage device through a 
register interface that is equivalent to that presented by a traditional |DE host adapter. 
The host software follows existing standards and conventions when accessing the 
register interface and follows standard command protocol conventions. 


SATA interface transfer rates are independent of UDMA mode settings. SATA interface 
transfer rates will operate at the bus’s maximum speed, regardless of the UDMA mode 
reported by the SATA device or the system BIOS. 
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5.16.1 SATA Feature Support 


ICH9 ICH9 
(AHCI/ RAID (AHCI/ RAID 
Disabled) Enabled) 


Native Command Queuing (NCQ) 


Auto Activate for DMA | NA Supported 


Supported 


Hot Plug Support Supported 


3 Gb/s Transfer Rate Supported Supported 


ATAPI Asynchronous Notification Supported 


Host & Link Initiated Power 
Supported 
Management 


Staggered Spin-Up Supported Supported 


Command Completion Coalescing | NA N/A 
External SATA Supported 


a 
Native Command Queuing Allows the device to reorder commands for more efficient data 
(NCQ) transfers 
Auto Achat ior MA Sa DMA Setup then DMA Activate sequence into a DMA 


Allows for device detection without power being applied and 
Hot Plug Support ability to connect and disconnect devices without prior 
notification to the system 


Asynchronous Signal Provides a recovery from a loss of signal or establishing 
Recovery communication after hot plug 


3 Gb/s Transfer Rate Capable of data transfers up to 3Gb/s 

ATAPI Asynchronous A mechanism for a device to send a notification to the host that 

Notification the device requires attention 

Host & Link Initiated Power Capability for the host controller or device to request Partial and 

Management Slumber interface power states 

Staggered Spin-Up Enables the host the ability to spin up hard drives sequentially 
to prevent power load problems on boot 


Reduces interrupt and completion overhead by allowing a 
specified number of commands to complete and then generating 
an interrupt to process the commands 


Technology that allows for an outside the box connection of up 
Barer el Sailr to 2 meters (when using the cable defined in SATA-1O) 


N/A 
N/A 
N/A 
Asynchronous Signal Recovery N/A Supported 
N/A 
N/A 
N/A 


Command Completion 
Coalescing 
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5.16.2 


5.16.2.1 


Note: 


5.16.2.2 


5.16.3 


Note: 


5.16.4 


5.16.4.1 


Theory of Operation 


Standard ATA Emulation 


The ICH9 contains a set of registers that shadow the contents of the legacy IDE 
registers. The behavior of the Command and Control Block registers, PlO, and DMA 
data transfers, resets, and interrupts are all emulated. 


The ICH9 will assert INTR when the master device completes the EDD command 
regardless of the command completion status of the slave device. If the master 
completes EDD first, an INTR is generated and BSY will remain '1' until the slave 
completes the command. If the slave completes EDD first, BSY will be '0' when the 
master completes the EDD command and asserts INTR. Software must wait for busy to 
clear (0) before completing an EDD command, as required by the ATA5 through ATA7 
(T13) industry standards. 


48-Bit LBA Operation 


The SATA host controller supports 48-bit LBA through the host-to-device register FIS 
when accesses are performed via writes to the task file. The SATA host controller will 
ensure that the correct data is put into the correct byte of the host-to-device FIS. 


There are special considerations when reading from the task file to support 48-bit LBA 
operation. Software may need to read all 16-bits. Since the registers are only 8-bits 
wide and act as a FIFO, a bit must be set in the device/control register, which is at 
offset 3F6h for primary and 376h for secondary (or their native counterparts). 


If software clears bit 7 of the control register before performing a read, the last item 
written will be returned from the FIFO. If software sets bit 7 of the control register 
before performing a read, the first item written will be returned from the FIFO. 


SATA Swap Bay Support 


The ICH9 provides for basic SATA swap bay support using the PSC register 
configuration bits and power management flows. A device can be powered down by 
software and the port can then be disabled, allowing removal and insertion of a new 
device. 


This SATA swap bay operation requires board hardware (implementation specific), 
BIOS, and operating system support. 


Hot Plug Operation 


ICH9 supports Hot Plug Surprise removal and Insertion Notification in the PARTIAL, 
SLUMBER and Listen Mode states when used with Low Power Device Presence 
Detection. Software can take advantage of power savings in the low power states while 
enabling hot plug operation. Refer to chapter 7 of the AHCI specification for details. 


Low Power Device Presence Detection 


Low Power Device Presence Detection enables SATA Link Power Management to co- 
exist with hot plug (insertion and removal) without interlock switch or cold presence 
detect. The detection mechanism allows Hot Plug events to be detectable by hardware 
across all link power states (Active, PARTIAL, SLUMBER) as well as AHCI Listen Mode. 


If the Low Power Device Presence Detection circuit is disabled the |CH9 reverts to Hot 
Plug Surprise Removal Notification (without an interlock switch) mode that is mutually 
exclusive of the PARTIAL and SLUMBER power management states. 
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5.16.5 Function Level Reset Support (FLR) 


The SATA Host Controller supports the Function Level Reset (FLR) capability. The FLR 
capability can be used in conjunction with Intel® Virtualization Technology. FLR allows 
an Operating System in a Virtual Machine to have complete control over a device, 
including its initialization, without interfering with the rest of the platform. The device 
provides a software interface that enables the Operating System to reset the whole 
device as if a PCI reset was asserted. 


5.16.5.1 FLR Steps 


5.16.5.1.1 FLR Initialization 


1. A FLR is initiated by software writing a ‘1’ to the Initiate FLR bit. 


2. All subsequent requests targeting the Function will not be claimed and will be 
Master Abort Immediate on the bus. This includes any configuration, I/O or 
Memory cycles, however, the Function shall continue to accept completions 
targeting the Function. 


5.16.5.1.2 FLR Operation 
The Function will Reset all configuration, 1/O and memory registers of the Function 
except those indicated otherwise and reset all internal states of the Function to the 
default or initial condition. 

5.16.5.1.3 FLR Completion 


The Initiate FLR bit is reset (cleared) when the FLR reset is completed. This bit can be 
used to indicate to the software that the FLR reset is completed. 


Note: From the time Initiate FLR bit is written to '1' software must wait at least 100 ms 
before accessing the function. 
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Note: 


5.16.6.1 


Intel® Matrix Storage Technology Configuration (Intel® 
ICH9OR, |CH9DH, | CH9DO, ICH9M and | CH9M-E Only) 


The Intel® Matrix Storage Technology offers several diverse options for RAID 
(redundant array of independent disks) to meet the needs of the end user. AHCI 
support provides higher performance and alleviates disk bottlenecks by taking 
advantage of the independent DMA engines that each SATA port offers in |CH9. 


RAID Level 0 performance scaling up to 4 drives, enabling higher throughput for 
data intensive applications such as video editing. 


Data security is offered through RAID Level 1, which performs mirroring. 


RAID Level 10 provides high levels of storage performance with data protection, 
combining the fault-tolerance of RAID Level 1 with the performance of RAID Level 
0. By striping RAID Level 1 segments, high I/O rates can be achieved on systems 
that require both performance and fault-tolerance. RAID Level 10 requires 4 hard 
drives, and provides the capacity of two drives. 


RAID Level 5 provides highly efficient storage while maintaining fault-tolerance on 
3 or more drives. By striping parity, and rotating it across all disks, fault tolerance 
of any single drive is achieved while only consuming 1 drive worth of capacity. That 
is, a3 drive RAID 5 has the capacity of 2 drives, or a 4 drive RAID 5 has the 
capacity of 3 drives. RAID 5 has high read transaction rates, with a medium write 
rate. RAID 5 is well suited for applications that require high amounts of storage 
while maintaining fault tolerance. 


Intel® Matrix Storage Technology RAID functionality not supported on |CH9M base 
component. 


By using the ICH9’s built-in Intel Matrix Storage Technology, there is no loss of PCI 
resources (request/grant pair) or add-in card slot. 


Intel® Matrix Storage Technology functionality requires the following items: 


1; 
2. 
3. 
4. 


ICH9 component enabled for Intel Matrix Storage Technology (see Section 1.3) 
Intel Matrix Storage Manager RAID Option ROM must be on the platform 

Intel Matrix Storage Manager drivers, most recent revision. 

At least two SATA hard disk drives (minimum depends on RAID configuration). 


Intel Matrix Storage Technology is not available in the following configurations: 


1. 


The SATA controller is in compatible mode. 


Intel® Matrix Storage Manager RAID Option ROM 


The Intel Matrix Storage Manager RAID Option ROM is a standard PnP Option ROM that 
is easily integrated into any System BIOS. When in place, it provides the following 
three primary functions: 


¢ Provides a text mode user interface that allows the user to manage the RAID 


configuration on the system in a pre-operating system environment. Its feature set 
is kept simple to keep size to a minimum, but allows the user to create & delete 
RAID volumes and select recovery options when problems occur. 


Provides boot support when using a RAID volume as a boot disk. It does this by 
providing Int13 services when a RAID volume needs to be accessed by DOS 
applications (such as NTLDR) and by exporting the RAID volumes to the System 
BIOS for selection in the boot order. 


e At each boot up, provides the user with a status of the RAID volumes and the 


option to enter the user interface by pressing CTRL. 
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5.16.7 


5.16.7.1 


Power Management Operation 


Power management of the ICH9 SATA controller and ports will cover operations of the 
host controller and the SATA wire. 


Power State Mappings 


The DO PCI power management state for device is supported by the ICH9 SATA 
controller. 


SATA devices may also have multiple power states. From parallel ATA, three device 
states are supported through ACPI. They are: 
¢ DO - Device is working and instantly available. 


¢ D1 - device enters when it receives a STANDBY IMMEDIATE command. Exit latency 
from this state is in seconds 


« D3 - from the SATA device's perspective, no different than a D1 state, in that it is 
entered via the STANDBY IMMEDIATE command. However, an ACPI method is also 
called which will reset the device and then cut its power. 


Each of these device states are subsets of the host controller’s DO state. 
Finally, SATA defines three PHY layer power states, which have no equivalent mappings 
to parallel ATA. They are: 

¢ PHY READY - PHY logic and PLL are both on and active 


¢ Partial - PHY logic is powered, but in a reduced state. Exit latency is no longer 
than 10 ns 


¢ Slumber - PHY logic is powered, but in a reduced state. Exit latency can be up to 
10 ms. 


Since these states have much lower exit latency than the ACPI D1 and D3 states, the 
SATA controller defines these states as sub-states of the device DO state. 


Figure 5-10. SATA Power States 
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5.16.7.2.1 


5.16.7.2.2 


5.16.7.2.3 


5.16.7.2.4 


Power State Transitions 


Partial and Slumber State Entry/ Exit 


The partial and slumber states save interface power when the interface is idle. It would 
be most analogous to PC] CLKRUN# (in power savings, not in mechanism), where the 
interface can have power saved while no commands are pending. The SATA controller 
defines PHY layer power management (as performed via primitives) as a driver 
operation from the host side, and a device proprietary mechanism on the device side. 
The SATA controller accepts device transition types, but does not issue any transitions 
as a host. All received requests from a SATA device will be ACKed. 


When an operation is performed to the SATA controller such that it needs to use the 
SATA cable, the controller must check whether the link is in the Partial or Slumber 
states, and if so, must issue a COM_WAKE to bring the link back online. Similarly, the 
SATA device must perform the same action. 


Device D1, D3 States 


These states are entered after some period of time when software has determined that 
no commands will be sent to this device for some time. The mechanism for putting a 
device in these states does not involve any work on the host controller, other then 
sending commands over the interface to the device. The command most likely to be 
used in ATA/ATAPI is the “STANDBY IMMEDIATE” command. 


Host Controller D3yo7 State 


After the interface and device have been put into a low power state, the SATA host 
controller may be put into a low power state. This is performed via the PCI power 
management registers in configuration space. There are two very important aspects to 
note when using PCI power management. 


1. When the power state is D3, only accesses to configuration space are allowed. Any 
attempt to access the memory or I/O spaces will result in master abort. 


2. When the power state is D3, no interrupts may be generated, even if they are 
enabled. If an interrupt status bit is pending when the controller transitions to DO, 
an interrupt may be generated. 


When the controller is put into D3, it is assumed that software has properly shut down 
the device and disabled the ports. Therefore, there is no need to sustain any values on 
the port wires. The interface will be treated as if no device is present on the cable, and 
power will be minimized. 


When returning from a D3 state, an internal reset will not be performed. 
Non-AHCI Mode PME# Generation 
When in non-AHCI mode (legacy mode) of operation, the SATA controller does not 


generate PME#. This includes attach events (since the port must be disabled), or 
interlock switch events (via the SATAGP pins). 
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5.16.7.3 


5.16.8 


SMI Trapping (APM) 


Device 31: Function2: Offset COh (see Section 14.1.37) contain control for generating 
SMI# on accesses to the IDE I/O spaces. These bits map to the legacy ranges (1FO- 
1F7h, 3F6h, 170-177h, and 376h) and native IDE ranges defined by PCMDBA, PCTLBA, 
SCMDBA an SCTLBA. If the SATA controller is in legacy mode and is using these 
addresses, accesses to one of these ranges with the appropriate bit set causes the 
cycle to not be forwarded to the SATA controller, and for an SMI # to be generated. If an 
access to the Bus-Master IDE registers occurs while trapping is enabled for the device 
being accessed, then the register is updated, an SMI# is generated, and the device 
activity status bits (Section 14.1.38) are updated indicating that a trap occurred. 


SATA Device Presence 


In legacy mode, the SATA controller does not generate interrupts based on hot plug/ 
unplug events. However, the SATA PHY does know when a device is connected (if not in 
a partial or slumber state), and it s beneficial to communicate this information to host 
software as this will greatly reduce boot times and resume times. 


The flow used to indicate SATA device presence is shown in Figure 5-11. The ‘PxE’ bit 
refers to PCS.P[3:0]E bits, depending on the port being checked and the ‘PxP’ bits refer 
to the PCS.P[3:0]P bits, depending on the port being checked. If the PCS/PxP bit is set 
a device is present, if the bit is cleared a device is not present. If a port is disabled, 
software can check to see if a new device is connected by periodically reenabling the 
port and observing if a device is present, if a device is not present it can disable the 
port and check again later. If a port remains enabled, software can periodically poll 
PCS.PxP to see if a new device is connected. 


Figure 5-11. Flow for Port Enable / Device Present Bits 


5.16.9 


200 








Host Host 
releases 
COMRESET COMWAKE Host 


Host Host Host Align 


COMRESET j releases Host Host 
a COMWAKE 410.2 dcha 


PxE bit Set by 
Software 





Host TX 
(Device 
RX) 


Device 





| 
Device 
Calibrate 


A 
¥ 
| 
| 
| 
| 
| 
| 


Device Device 
releases COMWAKE 
PxP bit set COMINIT 
by HBA 


SATA LED 
The SATALED# output is driven whenever the BSY bit is set in any SATA port. The 


SATALED# is an active-low open-drain output. When SATALED# is low, the LED should 
be active. When SATALED# is high, the LED should be inactive. 
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Note: 


5.16.11 


Note: 


5.16.12 


AHCI Operation 


The ICH9 provides hardware support for Advanced Host Controller Interface (AHCI), a 
programming interface for SATA host controllers developed through a joint industry 
effort. AHCI defines transactions between the SATA controller and software and enables 
advanced performance and usability with SATA. Platforms supporting AHCI may take 
advantage of performance features such as no master/slave designation for SATA 
devices—each device is treated as a master—and hardware assisted native command 
queuing. AHCI also provides usability enhancements such as Hot-Plug. AHCI requires 
appropriate software support (e.g., an AHCI driver) and for some features, hardware 
support in the SATA device or additional platform hardware. 


The ICH9 supports all of the mandatory features of the Serial ATA Advanced Host 
Controller Interface Specification, Revision 1.2 and many optional features, such as 
hardware assisted native command queuing, aggressive power management, LED 
indicator support, and Hot-Plug through the use of interlock switch support (additional 
platform hardware and software may be required depending upon the implementation). 


For reliable device removal notification while in AHCI operation without the use of 
interlock switches (surprise removal), interface power management should be disabled 
for the associated port. See Section 7.3.1 of the AHCI Specification for more 
information. 


Serial ATA Reference Clock Low Power Request 
(SATACLKREQ#) 


The 100 MHz Serial ATA Reference Clock (SATACLKP, SATACLKN) is implemented on the 
system as a ground-terminated low-voltage differential signal pair driven by the system 
Clock Chip. When all the SATA links are in Slumber or disabled, the SATA Reference 
Clock is not needed and may be stopped and tri-stated at the clock chip allowing 
system-level power reductions. 


The ICH9 uses the SATACLKREQ# output signal to communicate with the system Clock 
Chip to request either SATA clock running or to tell the system clock chip that it can 
stop the SATA Reference Clock. |CH9 drives this signal low to request clock running, 
and tristates the signal to indicate that the SATA Reference Clock may be stopped (the 
ICH9 never drives the pin high). When the SATACLKREQ# is tristated by the ICH9, the 
clock chip may stop the SATA Reference Clock within 100 ns, anytime after 100 ns, or 
not at all. If the SATA Reference Clock is not already running, it will start within 100 ns 
after a SATACLKREQ# is driven low by the ICH9. 


To enable SATA Reference Clock Low Power Request: 
1. Configure GPIO35 to native function 
2. Set SATA Clock Request Enable (SCRE) bit to ‘1’ (Dev 31:F2: Offset 94h: bit 28). 


The reset default for SATACLKREQ# is low to insure that the SATA Reference Clock is 
running after system reset. 


SGPIO Signals 


The SGPIO signals, in accordance to the SFF-8485 specification, support per-port LED 
signaling. These signals are not related to SATALED#, which allows for simplified 
indication of SATA command activity. The SGPIO group interfaces with an external 
controller chip that fetches and serializes the data for driving across the SGPIO bus. 
The output signals then control the LEDs. This feature is only valid in AHCI/RAID mode. 
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Mechanism 


The enclosure management for SATA Controller 1 (Device 31: Function 2) involves 
sending messages that control LEDs in the enclosure. The messages for this function 
are stored after the normal registers in the AHCI BAR, at Offset 400h bytes for ICH9 
from the beginning of the AHCI BAR as specified by the EM_LOC global register 
(Section 14.4.1.8). 


Software creates messages for transmission in the enclosure management message 
buffer. The data in the message buffer should not be changed if CTL.TM bit is set by 
software to transmit an update message. Software should only update the message 
buffer when CTL.TM bit is cleared by hardware otherwise the message transmitted will 
be indeterminate. Software then writes a register to cause hardware to transmit the 
message or take appropriate action based on the message content. The software 
should only create message types supported by the controller, which is LED messages 
for |CH9. If the software creates other non LED message types (e.g. SAF-TE, SES-2), 
the SGPIO interface may hang and the result is indeterminate. 


During reset all SGPIO pins will be in tri-state state. The interface will continue to be in 
tri-state state after reset until the first transmission occurs when software programs 
the message buffer and sets the transmit bit CTL.TM. The SATA Host controller will 
initiate the transmission by driving SCLOCK and at the same time drive the SLOAD to 
‘O’ prior to the actual bit stream transmission. The Host will drive SLOAD low for at 
least 5 SCLOCK then only start the bit stream by driving the SLOAD to high. SLOAD will 
be driven high for 1 SCLOCK follow by vendor specific pattern that is default to “0000” 
if software has yet to program the value. A total of 18-bit stream from 6 ports (Port0O, 
Port1, Port2, Port3, Port4 and Port5) of 3-bit per port LED message will be transmitted 
on SDATAOUTO pin after the SLOAD is driven high for 1 SCLOCK. Only 2 ports (port4 
and port5) of 6 bit total LED message follow by 12 bits of tri-state value will be 
transmitted out on SDATAOUT1 pin. 


All the default LED message values will be high prior to software setting them, except 
the Activity LED message that is configured to be hardware driven that will be 
generated based on the activity from the respective port. All the LED message values 
will be driven to ‘1’ for the port that is unimplemented as indicated in the Port 
Implemented register regardless of the software programmed value through the 
message buffer. 


There are 2 different ways of resetting |CH SGPIO interface, asynchronous reset and 
synchronous reset. Asynchronous reset is caused by platform reset to cause the SGPIO 
interface to be tri-state asynchronously. Synchronous reset is caused by setting the 
CTL.RESET bit, clearing the GHC.AE bit or HBA reset, where Host Controller will 
complete the existing full bit stream transmission then only tri-state all the SGPIO pins. 
After the reset, both synchronous and asynchronous, the SGPIO pins will stay tri- 
stated. 


ICH Host Controller does not ensure to cause the target SGPIO device or controller to 


be reset. Software is responsible to keep |CH SGPIO interface in tri-state stated for 2 
second in order to cause a reset on the target of the SGPIO interface. 


Message Format 
Messages shall be constructed with a one Dword header that describes the message to 


be sent followed by the actual message contents. The first Dword shall be constructed 
as follows: 
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Se ee ee 
31:28 | Reserved 


Message Type (MTYPE): Specifies the type of the message. 
The message types are: 
Oh = LED 
27:24 | 1h = SAF-TE 
2h = SES-2 
3h = SGPIO (register based interface) 
All other values reserved 


size of that data buffer is specified in this field. If there is no separate data buffer, this 
field shall have a value of ‘0’. The data directly follows the message in the message 


Data Size (DSI ZE): Specifies the data size in bytes. If the message (enclosure 

services command) has a data buffer that is associated with it that is transferred, the 

23:16 
buffer. For |CH9, this value should always be ‘0’. 


size is always 4 bytes. 


Reserved 


The SAF-TE, SES-2, and SGPIO message formats are defined in the corresponding 
specifications, respectively. The LED message type is defined in Section 5.16.12.3. It is 
the responsibility of software to ensure the content of the message format is correct. If 
the message type is not programmed as 'LED' for this controller, the controller shall not 
take any action to update its LEDs. Note that for LED message type, the message size 
is always consisted of 4 bytes. 





Message Size (MSI ZE): Specifies the size of the message in bytes. The message size 
15:8 | does not include the one Dword header. A value of ‘0’ is invalid. For |CH9, the message 


LED Message Type 


The LED message type specifies the status of up to three LEDs. Typically, the usage for 
these LEDs is activity, fault, and locate. Not all implementations necessarily contain all 
LEDs (for example, some implementations may not have a locate LED). The message 
identifies the HBA port number and the Port Multiplier port number that the slot status 
applies to. If a Port Multiplier is not in use with a particular device, the Port Multiplier 
port number shall be ‘0’. The format of the LED message type is defined in Table 5-42. 
ee LEDs shall retain their values until there is a following update for that particular 
slot. 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 203 


| | ® 
| Nn tel Functional Description 


Table 5-42. Multi-activity LED Message Type 


Value (VAL): This field describes the state of each LED for a particular location. There 
are three LEDs that may be supported by the HBA. Each LED has 3 bits of control. 


LED values are: 

000b - LED shall be off 

001b - LED shall be solid on as perceived by human eye 
All other values reserved 


The LED bit locations are: 

Bits 2:0 - Activity LED (may be driven by hardware) 
Bits 5:3 - Vendor Specific LED (e.g. locate) 

Bits 8:6 - Vendor Specific LED (e.g. fault) 

Bits 15:9 - Reserved 


Vendor specific message is: 
Bit 3:0 - Vendor Specific Pattern 


Bit 15:4 - Reserved 


Note: If Activity LED Hardware Driven (ATTR.ALHD) bit is set, host will output the 
hardware LED value sampled internally and will ignore software written activity value on 
bit [2:0]. Since |CH9 Enclosure Management does not support port multiplier based LED 
message, the LED message will be generated independently based on respective port’s 
operation activity. Vendor specific LED values Locate (Bits 5:3) and Fault (Bits 8:6) 
always are driven by software. 


Port Multiplier Information: Specifies slot specific information related to Port 
Multiplier. 

Bits 3:0 specify the Port Multiplier port number for the slot that requires the status 
update. If a Port Multiplier is not attached to the device in the affected slot, the Port 
Multiplier port number shall be '0'. Bits 7:4 are reserved. |CH9 does not support LED 
messages for devices behind a Port MUltiplier. This byte should be 0. 

HBA Information: Specifies slot specific information related to the HBA. 

Bits 4:0 - HBA port number for the slot that requires the status update. 


Bit 5 - If set to '1', Value is a vendor specific message that applies to the entire 
enclosure. If cleared to '0', Value applies to the port specified in bits 4:0. 


Bits 7:6 - Reserved 
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5.16.12.4 SGPIO Waveform 


Figure 5-12. Serial Data transmitted over the SGPIO Interface 
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External SATA 


ICH9 supports external SATA. External SATA utilizes the SATA interface outside of the 
system box. The usage model for this feature must comply with the Serial ATA II 
Cables and Connectors Volume 2 Gold specification at www.sata-io.org. Intel validates 
two configurations: 


1. The cable-up solution involves an internal SATA cable that connects to the SATA 
motherboard connector and spans to a back panel PCI bracket with an e-SATA 
connector. A separate e-SATA cable is required to connect an e-SATA device. 


2. The back-panel solution involves running a trace to the I/O back panel and 
connecting a device via an external SATA connector on the board. 


High Precision Event Timers 


This function provides a set of timers that can be used by the operating system. The 
timers are defined such that in the future, the operating system may be able to assign 
specific timers to used directly by specific applications. Each timer can be configured to 
cause a separate interrupt. 


ICH9 provides four timers. The four timers are implemented as a single counter each 
with its own comparator and value register. This counter increases monotonically. Each 
individual timer can generate an interrupt when the value in its value register matches 
the value in the main counter. 


The registers associated with these timers are mapped to a memory space (much like 
the I/O APIC). However, it is not implemented as a standard PCI function. The BIOS 
reports to the operating system the location of the register space. The hardware can 
support an assignable decode space; however, the BIOS sets this space prior to 
handing it over to the operating system 

(See Section 9.4). It is not expected that the operating system will move the location 
of these timers once it is set by the BIOS. 


Timer Accuracy 
1. The timers are accurate over any 1 ms period to within 0.05% of the time specified 
in the timer resolution fields. 


2. Within any 100 microsecond period, the timer reports a time that is up to two ticks 
too early or too late. Each tick is less than or equal to 100 ns, so this represents an 
error of less than 0.2%. 


3. The timer is monotonic. It does not return the same value on two consecutive 
reads (unless the counter has rolled over and reached the same value). 


The main counter is clocked by the 14.31818 MHz clock, synchronized into the 66.666 
MHz domain. This results in a non-uniform duty cycle on the synchronized clock, but 


does have the correct average period. The accuracy of the main counter is as accurate 
as the 14.3818 MHz clock. 


Interrupt Mapping 


Mapping Option #1 (Legacy Replacement Option) 


In this case, the Legacy Replacement Rout bit (LEG_RT_CNF) is set. This forces the 
mapping found in Table 5-43. 
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Table 5-43. Legacy Replacement Routing 


5.17.5 


In this case, the 8254 timer will 
IRQ2 : 
not cause any interrupts 


IRQ8 IRQ8 In this case, the RTC will not cause 
any interrupts. 


Mapping Option #2 (Standard Option) 





In this case, the Legacy Replacement Rout bit (LEG_RT_CNF) is 0. Each timer has its 
own routing control. The interrupts can be routed to various interrupts in the 8259 or 
1/0 APIC. A capabilities field indicates which interrupts are valid options for routing. If a 
timer is set for edge-triggered mode, the timers should not be share with any PCI 
interrupts. 


For the Intel |CH9, the only supported interrupt values are as follows: 

Timer 0 and 1: IRQ20, 21, 22 & 23 (I/O APIC only). 

Timer 2: IRQ11 (8259 or I/O APIC) and IRQ20, 21, 22 & 23 (I/O APIC only). 
Timer 3: [RQ12 (8259 or 1/O APIC) and IRQ 20, 21, 22 & 23 (I/O APIC only). 


Periodic vs. Non-Periodic Modes 


Non-Periodic Mode 


Timer 0 is configurable to 32 (default) or 64-bit mode, whereas Timers 1, 2 and 3 only 
support 32-bit mode (See Section 21.1.5). 


All four timers support non- periodic mode. 


Consult Section 2.3.9.2.1 of the I[A-PC HPET Specification for a description of this 
mode. 


Periodic Mode 


Timer 0 is the only timer that supports periodic mode. Consult Section 2.3.9.2.2 of the 
IA-PC HPET Specification for a description of this mode. 
The following usage model is expected: 
1. Software clears the ENABLE_CNF bit to prevent any interrupts 
. Software Clears the main counter by writing a value of OOh to it. 
. Software sets the TIMERO_VAL_SET_CNF bit. 
. Software writes the new value in the TIMERO_COMPARATOR_VAL register 
. Software sets the ENABLE_CNF bit to enable interrupts. 


ou BW N 
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Functional Description 


The Timer 0 Comparator Value register cannot be programmed reliably by a single 
64-bit write in a 32-bit environment except if only the periodic rate is being changed 
during run-time. If the actual Timer 0 Comparator Value needs to be reinitialized, then 
the following software solution will always work regardless of the environment: 


1. Set TIMERO_VAL_SET_CNF bit 
2. Set the lower 32 bits of the TimerO Comparator Value register 
3. Set TIMERO_VAL_SET_CNF bit 
4. Set the upper 32 bits of the TimerO Comparator Value register 


Enabling the Timers 


The BIOS or operating system PnP code should route the interrupts. This includes the 
Legacy Rout bit, Interrupt Rout bit (for each timer), interrupt type (to select the edge 
or level type for each timer) 
The Device Driver code should do the following for an available timer: 

1. Set the Overall Enable bit (Offset 04h, bit 0). 

2. Set the timer type field (selects one-shot or periodic). 

3. Set the interrupt enable 

4. Set the comparator value 


Interrupt Levels 


Interrupts directed to the internal 8259s are active high. See Section 5.9 for 
information regarding the polarity programming of the I/O APIC for detecting internal 
interrupts. 


If the interrupts are mapped to the 8259 or I/O APIC and set for level-triggered mode, 
they can be shared with PCI interrupts. They may be shared although it’s unlikely for 
the operating system to attempt to do this. 


If more than one timer is configured to share the same IRQ (using the 
TIMERn_INT_ROUT_CNF fields), then the software must configure the timers to level- 
triggered mode. Edge-triggered interrupts cannot be shared. 


Handling Interrupts 


If each timer has a unique interrupt and the timer has been configured for edge- 
triggered mode, then there are no specific steps required. No read is required to 
process the interrupt. 


If a timer has been configured to level-triggered mode, then its interrupt must be 
cleared by the software. This is done by reading the interrupt status register and 
writing a 1 back to the bit position for the interrupt to be cleared. 


Independent of the mode, software can read the value in the main counter to see how 
time has passed between when the interrupt was generated and when it was first 
serviced. 


If Timer O is set up to generate a periodic interrupt, the software can check to see how 
much time remains until the next interrupt by checking the timer value register. 
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Issues Related to 64-Bit Timers with 32-Bit Processors 


A 32-bit timer can be read directly using processors that are capable of 32-bit or 64-bit 
instructions. However, a 32-bit processor may not be able to directly read 64-bit timer. 
A race condition comes up if a 32-bit processor reads the 64-bit register using two 
separate 32-bit reads. The danger is that just after reading one half, the other half rolls 
over and changes the first half. 


If a 32-bit processor needs to access a 64-bit timer, it must first halt the timer before 
reading both the upper and lower 32-bits of the timer. If a 32-bit processor does not 
want to halt the timer, it can use the 64-bit timer as a 32-bit timer by setting the 
TIMERn_32MODE_CNF bit. This causes the timer to behave as a 32-bit timer. The upper 
32-bits are always 0. 


Alternatively, software may do a multiple read of the counter while it is running. 
Software can read the high 32 bits, then the low 32 bits, the high 32 bits again. If the 
high 32 bits have not changed between the two reads, then a rollover has not 
happened and the low 32 bits are valid. If the high 32 bits have changed between 
reads, then the multiple reads are repeated until a valid read is performed. 


Note: On a 64-bit platform, if software attempts a 64 bit read of the 64-bit counter, 
software must be aware that some platforms may split the 64 bit read into two 32 bit 
reads. The read maybe inaccurate if the low 32 bits roll over between the high and low 
reads. 


USB UHCI Host Controllers (D29:FO, Fl, F2, F3 
and D26:F0O, Fl and F2) 


The ICH9 contains six USB full/low-speed host controllers that support the standard 
Universal Host Controller Interface (UHCI), Revision 1.1. Each UHCI Host Controller 
(UHC) includes a root hub with two separate USB ports each, for a total of twelve USB 
ports. 


¢ Overcurrent detection on all twelve USB ports is supported. The overcurrent inputs 
are not 5 V tolerant, and can be used as GPIs if not needed. 


¢« The |CH9’s UHCI host controllers are arbitrated differently than standard PCI 
devices to improve arbitration latency. 


¢ The UHCI controllers use the Analog Front End (AFE) embedded cell that allows 
support for USB full-speed signaling rates, instead of USB I/O buffers. 


D26:F2 can be configured as D29:F3 during BIOS Post. 


Data Structures in Main Memory 


Section 3.1 - 3.3 of the Universal Host Controller Interface Specification, Revision 1.1 
details the data structures used to communicate control, status, and data between 
software and the |CH9. 


Data Transfers to/ from Main Memory 


Section 3.4 of the Universal Host Controller Interface Specification, Revision 1.1 
describes the details on how HCD and the ICH9 communicate via the Schedule data 
structures. 
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Data Encoding and Bit Stuffing 
The |CH9 USB employs NRZI data encoding (Non-Return to Zero Inverted) when 


transmitting packets. Full details on this implementation are given in the Universal 
Serial Bus Specification, Revision 2.0. 


Bus Protocol 


Bit Ordering 


Bits are sent out onto the bus least significant bit (LSb) first, followed by next LSb, 
through to the most significant bit (MSb) last. 


SYNC Field 


All packets begin with a synchronization (SYNC) field, which is a coded sequence that 
generates a maximum edge transition density. The SYNC field appears on the bus as 
IDLE followed by the binary string “KJ KJ KJ KK,” in its NRZI encoding. It is used by the 
input circuitry to align incoming data with the local clock and is defined to be 8 bits in 
length. SYNC serves only as a synchronization mechanism. The last two bits in the 
SYNC field are a marker that is used to identify the first bit of the PID. All subsequent 
bits in the packet must be indexed from this point. 


Packet Field Formats 


All packets have distinct start and end of packet delimiters. Full details are given in the 
Universal Serial Bus Specification, Revision 2.0, in Section 8.3.1. 


Address Fields 
Function endpoints are addressed using the function address field and the endpoint 


field. Full details on this are given in the Universal Serial Bus Specification, Revision 
2.0, in Section 8.3.2. 


Frame Number Field 
The frame number field is an 11-bit field that is incremented by the host on a per frame 


basis. The frame number field rolls over upon reaching its maximum value of 7FFh, and 
is sent only for SOF tokens at the start of each frame. 


Data Field 


The data field may range from 0 to 1023 bytes and must be an integral numbers of 
bytes. Data bits within each byte are shifted out LSB first. 


Cyclic Redundancy Check (CRC) 
CRC is used to protect the all non-PID fields in token and data packets. In this context, 


these fields are considered to be protected fields. Full details on this are given in the 
Universal Serial Bus Specification, Revision 2.0, in Section 8.3.5. 


Packet Formats 
The USB protocol calls out several packet types: token, data, and handshake packets. 


Full details on this are given in the Universal Serial Bus Specification, Revision 2.0, in 
section 8.4. 
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5.18.6 USB Interrupts 


There are two general groups of USB interrupt sources, those resulting from execution 
of transactions in the schedule, and those resulting from an ICH9 operation error. All 
transaction-based sources can be masked by software through the ICH9’s Interrupt 
Enable register. Additionally, individual transfer descriptors can be marked to generate 
an interrupt on completion. 


When the ICH9 drives an interrupt for USB, it internally drives the PIRQA# pin for USB 
function #0 and USB function #3, PIRQD# pin for USB function #1, and the PIRQC# 
pin for USB function #2, until all sources of the interrupt are cleared. In order to 
accommodate some operating systems, the Interrupt Pin register must contain a 
different value for each function of this new multi-function device. 


5.18.6.1 Transaction-Based Interrupts 


These interrupts are not signaled until after the status for the last complete transaction 
in the frame has been written back to host memory. This ensures that software can 
safely process through (Frame List Current Index -1) when it is servicing an interrupt. 


CRC Error / Time-Out 


A CRC/Time-Out error occurs when a packet transmitted from the ICH9 to a USB device 
or a packet transmitted from a USB device to the I|CH9 generates a CRC error. The |CH9 
is informed of this event by a time-out from the USB device or by the ICH9’s CRC 
checker generating an error on reception of the packet. Additionally, a USB bus time- 
out occurs when USB devices do not respond to a transaction phase within 19-bit times 
of an EOP. Either of these conditions causes the C_ERR field of the TD to decrement. 


When the C_ERR field decrements to 0, the following occurs: 
¢ The Active bit in the TD is cleared 
¢ The Stalled bit in the TD is set 
¢ The CRC/Time-out bit in the TD is set. 
e« At the end of the frame, the USB Error Interrupt bit is set in the HC status register. 


If the CRC/Time out interrupt is enabled in the Interrupt Enable register, a hardware 
interrupt will be signaled to the system. 


Interrupt on Completion 


Transfer Descriptors contain a bit that can be set to cause an interrupt on their 
completion. The completion of the transaction associated with that block causes the 
USB Interrupt bit in the HC Status Register to be set at the end of the frame in which 
the transfer completed. When a TD is encountered with the |OC bit set to 1, the |OC bit 
in the HC Status register is set to 1 at the end of the frame if the active bit in the TD is 
set to 0 (even if it was set to 0 when initially read). 


If the l1OC Enable bit of Interrupt Enable register (bit 2 of |/O offset 04h) is set, a 
hardware interrupt is signaled to the system. The USB Interrupt bit in the HC status 
register is set either when the TD completes successfully or because of errors. If the 
completion is because of errors, the USB Error bit in the HC status register is also set. 
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Short Packet Detect 


A transfer set is a collection of data which requires more than one USB transaction to 
completely move the data across the USB. An example might be a large print file which 
requires numerous TDs in multiple frames to completely transfer the data. Reception of 
a data packet that is less than the endpoint’s Max Packet size during Control, Bulk or 
Interrupt transfers signals the completion of the transfer set, even if there are active 
TDs remaining for this transfer set. Setting the SPD bit in a TD indicates to the HC to 
set the USB Interrupt bit in the HC status register at the end of the frame in which this 
event occurs. This feature streamlines the processing of input on these transfer types. 
If the Short Packet Interrupt Enable bit in the Interrupt Enable register is set, a 
hardware interrupt is signaled to the system at the end of the frame where the event 
occurred. 


Serial Bus Babble 


When a device transmits on the USB for a time greater than its assigned Max Length, it 
is said to be babbling. Since isochrony can be destroyed by a babbling device, this error 
results in the Active bit in the TD being cleared to 0 and the Stalled and Babble bits 
being set to 1. The C_ERR field is not decremented for a babble. The USB Error 
Interrupt bit in the HC Status register is set to 1 at the end of the frame. A hardware 
interrupt is signaled to the system. 


If an EOF babble was caused by the ICH9 (due to incorrect schedule for instance), the 
ICH9 forces a bit stuff error followed by an EOP and the start of the next frame. 


Stalled 


This event indicates that a device/endpoint returned a STALL handshake during a 
transaction or that the transaction ended in an error condition. The TDs Stalled bit is 
set and the Active bit is cleared. Reception of a STALL does not decrement the error 
counter. A hardware interrupt is signaled to the system. 


Data Buffer Error 


This event indicates that an overrun of incoming data or a under-run of outgoing data 
has occurred for this transaction. This would generally be caused by the |CH9 not being 
able to access required data buffers in memory within necessary latency requirements. 
Either of these conditions causes the C_ERR field of the TD to be decremented. 


When C_ERR decrements to 0, the Active bit in the TD is cleared, the Stalled bit is set, 
the USB Error Interrupt bit in the HC Status register is set to 1 at the end of the frame 
and a hardware interrupt is signaled to the system. 


Bit Stuff Error 


A bit stuff error results from the detection of a sequence of more that six 1s in a row 
within the incoming data stream. This causes the C_ERR field of the TD to be 
decremented. When the C_ERR field decrements to 0, the Active bit in the TD is cleared 
to 0, the Stalled bit is set to 1, the USB Error Interrupt bit in the HC Status register is 
set to 1 at the end of the frame and a hardware interrupt is signaled to the system. 
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5.18.6.2 


5.18.7 


Table 5-44, 


Non-Transaction Based I nterrupts 


If an |CH9 process error or system error occurs, the |CH9 halts and immediately issues 
a hardware interrupt to the system. 


Resume Received 


This event indicates that the ICH9 received a RESUME signal from a device on the USB 
bus during a global suspend. If this interrupt is enabled in the Interrupt Enable register, 
a hardware interrupt is signaled to the system allowing the USB to be brought out of 
the suspend state and returned to normal operation. 


1CH9 Process Error 


The HC monitors certain critical fields during operation to ensure that it does not 
process corrupted data structures. These include checking for a valid PID and verifying 
that the MaxLength field is less than 1280. If it detects a condition that would indicate 
that it is processing corrupted data structures, it immediately halts processing, sets the 
HC Process Error bit in the HC Status register and signals a hardware interrupt to the 
system. 


This interrupt cannot be disabled through the Interrupt Enable register. 


Host System Error 


The ICH9 sets this bit to 1 when a Parity error, Master Abort, or Target Abort occurs. 
When this error occurs, the |CH9 clears the Run/Stop bit in the Command register to 
prevent further execution of the scheduled TDs. This interrupt cannot be disabled 
through the Interrupt Enable register. 


USB Power Management 


The Host controller can be put into a suspended state and its power can be removed. 
This requires that certain bits of information are retained in the suspend power plane of 
the ICH9 so that a device on a port may wake the system. Such a device may be a fax- 
modem, which will wake up the machine to receive a fax or take a voice message. The 
settings of the following bits in |/O space will be maintained when the ICH9 enters the 
S3, S4, or S5 states. 


Bits Maintained in Low Power States 


a 
00h Enter Global Suspend Mode (EGSM) 


Port Enabled/ Disabled 
Port Status and | 6 | Resume Detect 
10h & 12h 
Control | 8 | Low-speed Device Attached 





When the ICH9 detects a resume event on any of its ports, it sets the corresponding 
USB_STS bit in ACPI space. If USB is enabled as a wake/break event, the system 
wakes up and an SCI generated. 
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Note: 


USB Legacy Keyboard Operation 


When a USB keyboard is plugged into the system, and a standard keyboard is not, the 
system may not boot, and MS-DOS legacy software will not run, because the keyboard 
will not be identified. The |CH9 implements a series of trapping operations which will 
snoop accesses that go to the keyboard controller, and put the expected data from the 
USB keyboard into the keyboard controller. 


The scheme described below assumes that the keyboard controller (8042 or 
equivalent) is on the LPC bus. 


This legacy operation is performed through SMM space. Figure 5-13 shows the Enable 
and Status path. The latched SMI source (60R, 60W, 64R, 64W) is available in the 
Status Register. Because the enable is after the latch, it is possible to check for other 
events that didn't necessarily cause an SMI. It is the software's responsibility to 
logically AND the value with the appropriate enable bits. 


Note also that the SMI is generated before the PCI cycle completes (e.g., before TRDY# 
goes active) to ensure that the processor doesn't complete the cycle before the SMI is 
observed. 


The logic also needs to block the accesses to the 8042. If there is an external 8042, 
then this is simply accomplished by not activating the 8042 CS. This is done by logically 
ANDing the four enables (60R, 60W, 64R, 64W) with the 4 types of accesses to 
determine if 8042CS should go active. An additional term is required for the “pass- 
through” case. 


The state table for Figure 5-13 is shown in Table 5-45. 


Figure 5-13. USB Legacy Keyboard Flow Diagram 
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intel. 


Current Data 
State Value 


Write 
64h / Read 
ae 
60h / Read 


~ ~ 


GateState2 Not FFh IDLE 
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GateStatel 


Standard D1 command. Cycle passed 
through to 8042. SMI# doesn't go active. 
PSTATE (offset CO, bit 6) goes to 1. 


Bit 3 in Config Register determines if cycle 
passed through to 8042 and if SMI# 
generated. 


Bit 2 in Config Register determines if cycle 
passed through to 8042 and if SMI# 
generated. 


Bit 1 in Config Register determines if cycle 
passed through to 8042 and if SMI# 
generated. 


Bit 0 in Config Register determines if cycle 
passed through to 8042 and if SMI# 
generated. 


Cycle passed through to 8042, even if trap 
enabled in Bit 1 in Config Register. No SMI# 
generated. PSTATE remains 1. If data value 
is not DFh or DDh then the 8042 may chose 
to ignore it. 


Cycle passed through to 8042, even if trap 
enabled via Bit 3 in Config Register. No 
SMI# generated. PSTATE remains 1. Stay in 
GateStatel because this is part of the 
double-trigger sequence. 


Bit 3 in Config space determines if cycle 
passed through to 8042 and if SMI# 
generated. PSTATE goes to O. If Bit 7 in 
Config Register is set, then SMI# should be 
generated. 


This is an invalid sequence. Bit 0 in Config 
Register determines if cycle passed through 
to 8042 and if SMI# generated. PSTATE 
goes to 0. If Bit 7 in Config Register is set, 
then SMI# should be generated. 


Just stay in same state. Generate an SMI # 
if enabled in Bit 2 of Config Register. PSTATE 
remains 1. 


Standard end of sequence. Cycle passed 
through to 8042. PSTATE goes to 0. Bit 7 in 
Config Space determines if SMI# should be 
generated. 


Improper end of sequence. Bit 3 in Config 
Register determines if cycle passed through 
to 8042 and if SMI# generated. PSTATE 
goes to 0. If Bit 7 in Config Register is set, 
then SMI# should be generated. 
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Table 5-45. USB Legacy Keyboard State Transitions 
Current Data Coteencnt 
State Value 
Just stay in same state. Generate an SMI# 
GateState2 | 64h / Read N/A GateState2 | if enabled in Bit 2 of Config Register. PSTATE 
remains 1. 


Improper end of sequence. Bit 1 in Config 
60h / Register determines if cycle passed through 
GateState2 Write XXh IDLE to 8042 and if SMI# generated. PSTATE 
goes to 0. If Bit 7 in Config Register is set, 
then SMI# should be generated. 
Improper end of sequence. Bit 0 in Config 
Register determines if cycle passed through 
GateState2 | 60h/ Read N/A IDLE to 8042 and if SMI# generated. PSTATE 
goes to 0. If Bit 7 in Config Register is set, 
then SMI# should be generated. 


5.18.9 Function Level Reset Support (FLR) 


The USB UHCI Controllers support the Function Level Reset (FLR) capability. The FLR 
capability can be used in conjunction with Intel® Virtualization Technology. FLR allows 
an Operating System in a Virtual Machine to have complete control over a device, 
including its initialization, without interfering with the rest of the platform. The device 
provides a software interface that enables the Operating System to reset the whole 
device as if a PCI reset was asserted. 





5.18.9.1 FLR Steps 


5.18.9.1.1 FLR Initialization 


1. A FLR is initiated by software writing a 1 to the Initiate FLR bit. 


2. All subsequent requests targeting the Function will not be claimed and will be 
Master Abort Immediate on the bus. This includes any configuration, I/O or 
Memory cycles, however, the Function shall continue to accept completions 
targeting the Function. 


5.18.9.1.2 FLR Operation 
The Function will Reset all configuration, 1/O and memory registers of the Function 
except those indicated otherwise and reset all internal states of the Function to the 
default or initial condition. 


5.18.9.1.3 FLR Completion 


The Initiate FLR bit is reset (cleared) when the FLR reset is completed. This bit can be 
used to indicate to the software that the FLR reset is completed. 


Note: From the time Initiate FLR bit is written to 1, software must wait at least 100 ms before 
accessing the function. 


216 Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


1] ® 
Functional Description [ n tel 


5.19 USB EHCI Host Controllers (D29:F7 and D26:F7) 


The ICH9 contains two Enhanced Host Controller Interface (EHCI) host controllers 
which support up to twelve USB 2.0 high-speed root ports. USB 2.0 allows data 
transfers up to 480 Mb/s using the same pins as the twelve USB full-speed/low-speed 
ports. The |CH9 contains port-routing logic that determines whether a USB port is 
controlled by one of the UHCI controllers or by one of the EHCI controllers. USB 2.0 
based Debug Port is also implemented in the |CH9. 


A summary of the key architectural differences between the USB UHCI host controllers 
and the EHCI host controller are shown in Table 5-46. 


Table 5-46. UHCI vs. EHCI 


Accessible by 1/O space Memory Space 


Memory Data Structure Single linked list aoe inkoreHodie ald synchronous 


Differential Signaling Voltage 3.3 V 400 mV 


6 or 8 (controller #1) and 6 or 4 
Ports per Controller (Controller #2) 


5.19.1 EHC Initialization 


The following descriptions step through the expected |CH9 Enhanced Host Controller 
(EHC) initialization sequence in chronological order, beginning with a complete power 
cycle in which the suspend well and core well have been off. 





5.19.1.1 BIOS Initialization 
BIOS performs a number of platform customization steps after the core well has 


powered up. Contact your Intel Field Representative for additional |CH9 BIOS 
information. 


5.19.1.2 Driver Initialization 


See Chapter 4 of the Enhanced Host Controller Interface Specification for Universal 
Serial Bus, Revision 1.0. 
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5.19.1.3 


5.19.2 


5.19.3 


5.19.4 
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EHC Resets 


In addition to the standard |CH9 hardware resets, portions of the EHC are reset by the 
HCRESET bit and the transition from the D3yo7 device power management state to the 
DO state. The effects of each of these resets are: 


Memory space The HCRESET must only affect 

registers except registers that the EHCI driver 
HCRESET bit set. | Structural controls. PCI Configuration 

Parameters (which is space and BIOS-programmed 


Configuration 
registers. 


written by BIOS). parameters can not be reset. 


The D3-to-DO transition must 
not cause wake information 
Core well registers Suspend well (suspend well) to be lost. It also 
(except BIOS- registers; BIOS- must not clear BIOS- 
programmed programmed core | programmed registers because 
registers). well registers. BIOS may not be invoked 
following the D3-to-DO 
transition. 


Software writes 
the Device Power 
State from D3yor 
(11b) to DO 
(OOb). 


If the detailed register descriptions give exceptions to these rules, those exceptions 
override these rules. This summary is provided to help explain the reasons for the reset 
policies. 


Data Structures in Main Memory 


See Section 3 and Appendix B of the Enhanced Host Controller Interface Specification 
for Universal Serial Bus, Revision 1.0 for details. 


USB 2.0 Enhanced Host Controller DMA 
The ICH9 USB 2.0 EHC implements three sources of USB packets. They are, in order of 
priority on USB during each microframe: 

1. The USB 2.0 Debug Port (see Section USB 2.0 Based Debug Port), 

2. The Periodic DMA engine, and 

3. The Asynchronous DMA engine. 
The ICH9 always performs any currently-pending debug port transaction at the 
beginning of a microframe, followed by any pending periodic traffic for the current 
microframe. If there is time left in the microframe, then the EHC performs any pending 
asynchronous traffic until the end of the microframe (EOF1). Note that the debug port 


traffic is only presented on one port (Port #0), while the other ports are idle during this 
time. 


Data Encoding and Bit Stuffing 


See Chapter 8 of the Universal Serial Bus Specification, Revision 2.0. 
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5,19.5 


5.19.6 


5.19.6.1 


Packet Formats 
See Chapter 8 of the Universal Serial Bus Specification, Revision 2.0. 


The |CH9 EHCI allows entrance to USB test modes, as defined in the USB 2.0 
specification, including Test J, Test Packet, etc. However note that the ICH9 Test Packet 
test mode interpacket gap timing may not meet the USB 2.0 specification. 


USB 2.0 Interrupts and Error Conditions 


Section 4 of the Enhanced Host Controller Interface Specification for Universal Serial 
Bus, Revision 1.0 goes into detail on the EHC interrupts and the error conditions that 
cause them. All error conditions that the EHC detects can be reported through the EHCI 
Interrupt status bits. Only |CH9-specific interrupt and error-reporting behavior is 
documented in this section. The EHCI Interrupts Section must be read first, followed by 
this section of the datasheet to fully comprehend the EHC interrupt and error-reporting 
functionality. 


¢« Based on the EHC’s Buffer sizes and buffer management policies, the Data Buffer 
Error can never occur on the |CH9. 


e« Master Abort and Target Abort responses from hub interface on EHC-initiated read 
packets will be treated as Fatal Host Errors. The EHC halts when these conditions 
are encountered. 


¢ The ICH9 may assert the interrupts which are based on the interrupt threshold as 
soon as the status for the last complete transaction in the interrupt interval has 
been posted in the internal write buffers. The requirement in the Enhanced Host 
Controller Interface Specification for Universal Serial Bus, Revision 1.0 (that the 
status is written to memory) is met internally, even though the write may not be 
seen on DMI before the interrupt is asserted. 


e Since the ICH9 supports the 1024-element Frame List size, the Frame List Rollover 
interrupt occurs every 1024 milliseconds. 


¢ The I1CH9 delivers interrupts using PIRQH#. 


* The ICH9 does not modify the CERR count on an Interrupt IN when the “Do 
Complete-Split” execution criteria are not met. 


¢ For complete-split transactions in the Periodic list, the “Missed Microframe” bit does 
not get set on a control-structure-fetch that fails the late-start test. If subsequent 
accesses to that control structure do not fail the late-start test, then the “Missed 
Microframe” bit will get set and written back. 


Aborts on USB 2.0-I nitiated Memory Reads 
If a read initiated by the EHC is aborted, the EHC treats it as a fatal host error. The 
following actions are taken when this occurs: 

* The Host System Error status bit is set 


« The DMA engines are halted after completing up to one more transaction on the 
USB interface 


« If enabled (by the Host System Error Enable), then an interrupt is generated 


e If the status is Master Abort, then the Received Master Abort bit in configuration 
space is set 


e If the status is Target Abort, then the Received Target Abort bit in configuration 
space is set 


¢ If enabled (by the SERR Enable bit in the function’s configuration space), then the 
Signaled System Error bit in configuration bit is set. 
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5.19.7 


5.19.7.1 


5.19.7.2 


5.19.7.3 
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USB 2.0 Power Management 


Pause Feature 


This feature allows platforms (especially mobile systems) to dynamically enter low- 
power states during brief periods when the system is idle (i.e., between keystrokes). 
This is useful for enabling power management features like Intel SpeedStep ® 
technology in the ICH9. The policies for entering these states typically are based on the 
recent history of system bus activity to incrementally enter deeper power management 
states. Normally, when the EHC is enabled, it regularly accesses main memory while 
traversing the DMA schedules looking for work to do; this activity is viewed by the 
power management software as a non-idle system, thus preventing the power 
managed states to be entered. Suspending all of the enabled ports can prevent the 
memory accesses from occurring, but there is an inherent latency overhead with 
entering and exiting the suspended state on the USB ports that makes this 
unacceptable for the purpose of dynamic power management. As a result, the EHCI 
software drivers are allowed to pause the EHC’s DMA engines when it knows that the 
traffic patterns of the attached devices can afford the delay. The pause only prevents 
the EHC from generating memory accesses; the SOF packets continue to be generated 
on the USB ports (unlike the suspended state). 


Suspend Feature 


The Enhanced Host Controller Interface (EHCI) For Universal Serial Bus Specification, 
Section 4.3 describes the details of Port Suspend and Resume. 


ACPI Device States 


The USB 2.0 function only supports the DO and D3 PCI Power Management states. 
Notes regarding the I|CH9 implementation of the Device States: 


1. The EHC hardware does not inherently consume any more power when it is in the 
DO state than it does in the D3 state. However, software is required to suspend or 
disable all ports prior to entering the D3 state such that the maximum power 
consumption is reduced. 


2. In the DO state, all implemented EHC features are enabled. 


3. In the D3 state, accesses to the EHC memory-mapped I/O range will master abort. 
Note that, since the Debug Port uses the same memory range, the Debug Port is 
only operational when the EHC is in the DO state. 


4. In the D3 state, the EHC interrupt must never assert for any reason. The internal 
PME# signal is used to signal wake events, etc. 


5. When the Device Power State field is written to DO from D3, an internal reset is 
generated. See section EHC Resets for general rules on the effects of this reset. 


6. Attempts to write any other value into the Device Power State field other than 00b 
(DO state) and 11b (D3 state) will complete normally without changing the current 
value in this field. 
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5.19.7.4 


5.19.7.5 


5.19.8 


Note: 


ACPI System States 


The EHC behavior as it relates to other power management states in the system is 
summarized in the following list: 


— The System is always in the SO state when the EHC is in the DO state. However, 
when the EHC is in the D3 state, the system may be in any power management 
state (including SO). 


— When in DO, the Pause feature (See Section 5.19.7.1) enables dynamic 
processor low-power states to be entered. 


— The PLL in the EHC is disabled when entering the S3/S4/S5 states (core power 
turns off). 


— All core well logic is reset in the S3/S4/S5 states. 


Mobile Considerations 


The ICH9 USB 2.0 implementation does not behave differently in the mobile 
configurations versus the desktop configurations. However, some features may be 
especially useful for the mobile configurations. 


« If a system (e.g., mobile) does not implement all twelve USB 2.0 ports, the ICH9 
provides mechanisms for changing the structural parameters of the EHC and hiding 
unused UHCI controllers. See the Intel® |CH9 BIOS Specification for information on 
how BIOS should configure the |CH9. 


¢« Mobile systems may want to minimize the conditions that will wake the system. 
The ICH9 implements the “Wake Enable” bits in the Port Status and Control 
registers, as specified in the EHCI spec, for this purpose. 


¢« Mobile systems may want to cut suspend well power to some or all USB ports when 
in a low-power state. The ICH9 implements the optional Port Wake Capability 
Register in the EHC Configuration Space for this platform-specific information to be 
communicated to software. 


Interaction with UHCI Host Controllers 


The Enhanced Host controllers share its ports with UHCI Host controllers in the ICH9. 
The UHC at D29:FO shares ports 0 and 1; the UHC at D29:F1 shares ports 2 and 3; the 
UHC at D29:F2 shares ports 4 and 5 with the EHC at D29:F7, while the UHC at D26:FO 
shares ports 6 and 7, the UHC at D26:F1 shares ports 8 and 9, and the UHC at D26:F2 
shares ports 10 and 11 with EHC at D26:F7. There is very little interaction between the 
Enhanced and the UHCI controllers other than the muxing control which is provided as 
part of the EHC. Figure 5-14 shows the USB Port Connections at a conceptual level. 


D26:F2 can be configured as D29:F3 during BIOS post. 
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5.19.8.1 Port-Routing Logic 


Integrated into the EHC functionality is port-routing logic, which performs the muxing 
between the UHCI and EHC! host controllers. The I|CH9 conceptually implements this 
logic as described in Section 4.2 of the Enhanced Host Controller Interface Specification 
for Universal Serial Bus, Revision 1.0. If a device is connected that is not capable of 
USB 2.0’s high-speed signaling protocol or if the EHCI software drivers are not present 
as indicated by the Configured Flag, then the UHCI controller owns the port. Owning 
the port means that the differential output is driven by the owner and the input stream 
is only visible to the owner. The host controller that is not the owner of the port 
internally sees a disconnected port. 


Figure 5-14. Intel® |CH9-USB Port Connections Default Six and Six Configuration 


ee 


PortO Port1 Port 2 Port3  Port4 Port5 Port6 Port7 Port 8 Port9 Port 10 Port11 





Figure 5-15. Intel® |CH9-USB Port Connections Eight and Four Configuration 
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Note that the port-routing logic is the only block of logic within the ICH9 that observes 
the physical (real) connect/disconnect information. The port status logic inside each of 
the host controllers observes the electrical connect/disconnect information that is 
generated by the port-routing logic. 


Only the differential signal pairs are multiplexed/de- multiplexed between the UHCI and 
EHCI host controllers. The other USB functional signals are handled as follows: 


¢« The Overcurrent inputs (OC[11:0]#) are directly routed to both controllers. An 
overcurrent event is recorded in both controllers’ status registers. 
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The Port-Routing logic is implemented in the Suspend power well so that re- 
enumeration and re-mapping of the USB ports is not required following entering and 
exiting a system sleep state in which the core power is turned off. 


The ICH9 also allows the USB Debug Port traffic to be routed in and out of Port #0 and 
Port#6. When in this mode, the Enhanced Host controller is the owner of Port #0 and 


Device Connects 


The Enhanced Host Controller Interface Specification for Universal Serial Bus, Revision 
1.0 describes the details of handling Device Connects in Section 4.2. There are four 
general scenarios that are summarized below. 


1. Configure Flag = O and a full-speed/low-speed-only Device is connected 
— In this case, the UHC is the owner of the port both before and after the connect 


occurs. The EHC (except for the port-routing logic) never sees the connect 
occur. The UHCI driver handles the connection and initialization process. 


2. Configure Flag = 0 and a high-speed-capable Device is connected 
— In this case, the UHC is the owner of the port both before and after the connect 


occurs. The EHC (except for the port-routing logic) never sees the connect 
occur. The UHCI driver handles the connection and initialization process. Since 
the UHC does not perform the high-speed chirp handshake, the device operates 
in compatible mode. 


3. Configure Flag = 1 and a full-speed/low-speed-only Device is connected 
— In this case, the EHC is the owner of the port before the connect occurs. The 


EHC! driver handles the connection and performs the port reset. After the reset 
process completes, the EHC hardware has cleared (not set) the Port Enable bit 
in the EHC’s PORTSC register. The EHCI driver then writes a 1 to the Port Owner 
bit in the same register, causing the UHC to see a connect event and the EHC to 
see an “electrical” disconnect event. The UHCI driver and hardware handle the 
connection and initialization process from that point on. The EHC! driver and 
hardware handle the perceived disconnect. 


4. Configure Flag = 1 and a high-speed-capable Device is connected 
— In this case, the EHC is the owner of the port before, and remains the owner 


after, the connect occurs. The EHCI driver handles the connection and performs 
the port reset. After the reset process completes, the EHC hardware has set the 
Port Enable bit in the EHC’s PORTSC register. The port is functional at this point. 
The UHC continues to see an unconnected port. 
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Device Disconnects 


The Enhanced Host Controller Interface Specification for Universal Serial Bus, Revision 
1.0 describes the details of handling Device Connects in Section 4.2. There are three 
general scenarios that are summarized below. 


1. Configure Flag = 0 and the device is disconnected 


— In this case, the UHC is the owner of the port both before and after the 
disconnect occurs. The EHC (except for the port-routing logic) never sees a 
device attached. The UHCI driver handles disconnection process. 


2. Configure Flag = 1 and a full-speed/low-speed-capable Device is disconnected 


— In this case, the UHC is the owner of the port before the disconnect occurs. The 
disconnect is reported by the UHC and serviced by the associated UHCI driver. 
The port-routing logic in the EHC cluster forces the Port Owner bit to 0, 
indicating that the EHC owns the unconnected port. 


3. Configure Flag = 1 and a high-speed-capable Device is disconnected 


— In this case, the EHC is the owner of the port before, and remains the owner 
after, the disconnect occurs. The EHCI hardware and driver handle the 
disconnection process. The UHC never sees a device attached. 


Effect of Resets on Port-Routing Logic 
As mentioned above, the Port Routing logic is implemented in the suspend power well 


so that remuneration and re-mapping of the USB ports is not required following 
entering and exiting a system sleep state in which the core power is turned off. 


Reset Event Effect on Configure Flag Effect on Port Owner Bits 


Suspend Well Reset cleared (0) set (1) 


HCRESET cleared (0) set (1) 





USB 2.0 Legacy Keyboard Operation 

The ICH9 must support the possibility of a keyboard downstream from either a full- 
speed/low-speed or a high-speed port. The description of the legacy keyboard support 
is unchanged from USB 1.1 (See Section 5.18.8). 


The EHC provides the basic ability to generate SMIs on an interrupt event, along with 
more sophisticated control of the generation of SMIs. 
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5.19.10 USB 2.0 Based Debug Port 


The ICH9 supports the elimination of the legacy COM ports by providing the ability for 
new debugger software to interact with devices on a USB 2.0 port. 


High-level restrictions and features are: 


Operational before USB 2.0 drivers are loaded. 

Functions even when the port is disabled. 

Works even though non-configured port is default-routed to the UHCI. Note that 
the Debug Port can not be used to debug an issue that requires a full-speed/low- 
speed device on Port #0 using the UHCI drivers. 

Allows normal system USB 2.0 traffic in a system that may only have one USB port. 
Debug Port device (DPD) must be high-speed capable and connect directly to Port 
#0 and Port#6 on ICH9 systems (e.g., the DPD cannot be connected to 

Port #0/Port#6 through a hub). 

Debug Port FIFO always makes forward progress (a bad status on USB is simply 
presented back to software). 


The Debug Port FIFO is only given one USB access per microframe. 


The Debug port facilitates operating system and device driver debug. It allows the 
software to communicate with an external console using a USB 2.0 connection. 
Because the interface to this link does not go through the normal USB 2.0 stack, it 
allows communication with the external console during cases where the operating 
system is not loaded, the USB 2.0 software is broken, or where the USB 2.0 software is 
being debugged. Specific features of this implementation of a debug port are: 


Only works with an external USB 2.0 debug device (console) 
Implemented for a specific port on the host controller 


Operational anytime the port is not suspended AND the host controller is in DO 
power state. 


Capability is interrupted when port is driving USB RESET 


5.19.10.1 Theory of Operation 


There are two operational modes for the USB debug port: 


1. 


Mode 1 is when the USB port is in a disabled state from the viewpoint of a standard 
host controller driver. |n Mode 1, the Debug Port controller is required to generate a 
“keepalive” packets less than 2 ms apart to keep the attached debug device from 
suspending. The keepalive packet should be a standalone 32-bit SYNC field. 


. Mode 2 is when the host controller is running (i.e., host controller’s Run/Stop# bit 


is 1). In Mode 2, the normal transmission of SOF packets will keep the debug 
device from suspending. 


Behavioral Rules 


1. 


2. 


4. 


In both modes 1 and 2, the Debug Port controller must check for software 
requested debug transactions at least every 125 microseconds. 

If the debug port is enabled by the debug driver, and the standard host controller 
driver resets the USB port, USB debug transactions are held off for the duration of 
the reset and until after the first SOF is sent. 


. If the standard host controller driver suspends the USB port, then USB debug 


transactions are held off for the duration of the suspend/resume sequence and until 
after the first SOF is sent. 

The ENABLED_CNT bit in the debug register space is independent of the similar 
port control bit in the associated Port Status and Control register. 
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Table 5-47 shows the debug port behavior related to the state of bits in the debug 
registers as well as bits in the associated Port Status and Control register. 


Table 5-47. Debug Port Behavior 


OWNER_CN | ENABLED_C Port Run / : 
x Xx x Xx Debug port is not being used. 

Normal operation. 

1 x x Xx Debug port is not being used. 
Normal operation. 
Debug port in Mode 1. SYNC 
keepalives sent plus debug traffic 
Debug port in Mode 2. SOF (and 
only SOF) is sent as keepalive. 


Debug traffic is also sent. Note 
that no other normal traffic is 


sent out this port, because the 
port is not enabled. 


Invalid. Host controller driver 
should never put controller into 
this state (enabled, not running 
and not suspended). 


Port is suspended. No debug 
traffic sent. 
Debug port in Mode 2. Debug 
1 1 1 1 traffic is interspersed with 
normal traffic. 
1 1 1 1 1 Port is suspended. No debug 
traffic sent. 


5.19.10.1.1 OUT Transactions 





An Out transaction sends data to the debug device. It can occur only when the 
following are true: 


¢« The debug port is enabled 
¢« The debug software sets the GO_CNT bit 
* The WRITE_READ#_CNT bit is set 


The sequence of the transaction is: 
1. Software sets the appropriate values in the following bits: 

— USB_ADDRESS_CNF 
— USB_ENDPOINT_CNF 
— DATA_BUFFER[63:0] 
— TOKEN_PID_CNT[7:0] 
— SEND_PID_CNT[15:8] 
— DATA_LEN_CNT 
— WRITE_READ#_CNT: (note: this will always be 1 for OUT transactions) 
— GO_CNT: (note: this will always be 1 to initiate the transaction) 
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2. The debug port controller sends a token packet consisting of: 
— SYNC 
— TOKEN _PID_CNT field 
— USB_ADDRESS CNT field 
— USB_ENDPOINT_CNT field 
— 5-bit CRC field 


3. After sending the token packet, the debug port controller sends a data packet 
consisting of: 


— SYNC 
— SEND_PID_CNT field 
— The number of data bytes indicated in DATA_LEN_CNT from the DATA_BUFFER 
— 16-bit CRC 
NOTE: A DATA_LEN_CNT value of 0 is valid in which case no data bytes would be 
included in the packet. 


4. After sending the data packet, the controller waits for a handshake response from 
the debug device. 


¢ If a handshake is received, the debug port controller: 
— a. Places the received PID in the RECEIVED_PID_STS field 
— b. Resets the ERROR_GOOD#_STS bit 
— c. Sets the DONE_STS bit 
¢ If no handshake PID is received, the debug port controller: 
— a. Sets the EXCEPTION_STS field to 001b 
— b. Sets the ERROR_GOOD#_STS bit 
— c. Sets the DONE_STS bit 


5.19.10.1.2 IN Transactions 
An IN transaction receives data from the debug device. It can occur only when the 
following are true: 
¢ The debug port is enabled 
¢« The debug software sets the GO_CNT bit 
* The WRITE_READ#_CNT bit is reset 


The sequence of the transaction is: 
1. Software sets the appropriate values in the following bits: 
— USB_ADDRESS_CNF 
— USB_ENDPOINT_CNF 
— TOKEN_PID_CNT[7:0] 
— DATA_LEN_CNT 
WRITE_READ#_CNT: (note: this will always be 0 for IN transactions) 
GO_CNT: (note: this will always be 1 to initiate the transaction) 
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2. The debug port controller sends a token packet consisting of: 
— SYNC 
— TOKEN_PID_CNT field 
— USB_ADDRESS CNT field 
— USB_ENDPOINT_CNT field 
— 5-bit CRC field. 


3. After sending the token packet, the debug port controller waits for a response from 
the debug device. 
If a response is received: 


— The received PID is placed into the RECEIVED_PID_STS field 
— Any subsequent bytes are placed into the DATA_BUFFER 


— The DATA_LEN_CNT field is updated to show the number of bytes that were 
received after the PID. 


4. If a valid packet was received from the device that was one byte in length 
(indicating it was a handshake packet), then the debug port controller: 


— Resets the ERROR_GOOD#_STS bit 
— Sets the DONE_STS bit 


5. If a valid packet was received from the device that was more than one byte in 
length (indicating it was a data packet), then the debug port controller: 


— Transmits an ACK handshake packet 
— Resets the ERROR_GOOD#_STS bit 
— Sets the DONE_STS bit 
6. If no valid packet is received, then the debug port controller: 
— Sets the EXCEPTION_STS field to 001b 
— Sets the ERROR_GOOD#_STS bit 
— Sets the DONE_STS bit. 


Debug Software 


Enabling the Debug Port 


There are two mutually exclusive conditions that debug software must address as part 
of its startup processing: 


¢ The EHCI has been initialized by system software 
e The EHCI has not been initialized by system software 


Debug software can determine the current ‘initialized’ state of the EHCI by examining 
the Configure Flag in the EHCI USB 2.0 Command Register. If this flag is set, then 
system software has initialized the EHCI. Otherwise the EHCI should not be considered 
initialized. Debug software will initialize the debug port registers depending on the 
state of the EHCI. However, before this can be accomplished, debug software must 
determine which root USB port is designated as the debug port. 


Determining the Debug Port 


Debug software can easily determine which USB root port has been designated as the 
debug port by examining bits 20:23 of the EHC] Host Controller Structural Parameters 
register. This 4-bit field represents the numeric value assigned to the debug port (i.e., 
0000=port 0). 
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Debug Software Startup with Non-Initialized EHCI 


Debug software can attempt to use the debug port if after setting the OWNER_CNT bit, 
the Current Connect Status bit in the appropriate (See Determining the Debug Port) 
PORTSC register is set. If the Current Connect Status bit is not set, then debug 
software may choose to terminate or it may choose to wait until a device is connected. 


If a device is connected to the port, then debug software must reset/enable the port. 
Debug software does this by setting and then clearing the Port Reset bit the PORTSC 
register. To ensure a successful reset, debug software should wait at least 50 ms before 
clearing the Port Reset bit. Due to possible delays, this bit may not change to 0 
immediately; reset is complete when this bit reads as 0. Software must not continue 
until this bit reads 0. 


If a high-speed device is attached, the EHC! will automatically set the Port Enabled/ 
Disabled bit in the PORTSC register and the debug software can proceed. Debug 
software should set the ENABLED_CNT bit in the Debug Port Control/Status register, 
and then reset (clear) the Port Enabled/Disabled bit in the PORTSC register (so that the 
system host controller driver does not see an enabled port when it is first loaded). 


Debug Software Startup with I nitialized EHCI 


Debug software can attempt to use the debug port if the Current Connect Status bit in 
the appropriate (See Determining the Debug Port) PORTSC register is set. If the 
Current Connect Status bit is not set, then debug software may choose to terminate or 
it may choose to wait until a device is connected. 


If a device is connected, then debug software must set the OWNER_CNT bit and then 
the ENABLED_CNT bit in the Debug Port Control/Status register. 


Determining Debug Peripheral Presence 


After enabling the debug port functionality, debug software can determine if a debug 
peripheral is attached by attempting to send data to the debug peripheral. If all 
attempts result in an error (Exception bits in the Debug Port Control/Status register 
indicates a Transaction Error), then the attached device is not a debug peripheral. If the 
debug port peripheral is not present, then debug software may choose to terminate or 
it may choose to wait until a debug peripheral is connected. 


USB Pre-Fetch Based Pause 


The Pre-Fetch Based Pause is a power management feature in USB (EHCI) host 
controllers to ensure maximum C3/C4 processor power state time with C2 popup. This 
feature applies to the period schedule, and works by allowing the DMA engine to 
identify periods of idleness and preventing the DMA engine from accessing memory 
when the periodic schedule is idle. Typically in the presence of periodic devices with 
multiple millisecond poll periods, the periodic schedule will be idle for several frames 
between polls. 


The USB Pre-Fetch Based Pause feature is disabled by setting bit 4 of EHCI 
Configuration Register Section 17.1.30. 
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5.19.12.1 


5.19.12.1.1 


5.19.12.1.2 


5.19.12.1.3 


Note: 


5.20 
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Function Level Reset Support (FLR) 


The USB EHC! Controllers support the Function Level Reset (FLR) capability. The FLR 
capability can be used in conjunction with Intel® Virtualization Technology. FLR allows 
an Operating System in a Virtual Machine to have complete control over a device, 
including its initialization, without interfering with the rest of the platform. The device 
provides a software interface that enables the Operating System to reset the whole 
device as if a PCI reset was asserted. 


FLR Steps 


FLR Initialization 


1. A FLR is initiated by software writing a ‘1’ to the Initiate FLR bit. 


2. All subsequent requests targeting the Function will not be claimed and will be 
Master Abort Immediate on the bus. This includes any configuration, I/O or 
Memory cycles, however, the Function shall continue to accept completions 
targeting the Function. 


FLR Operation 


The Function will Reset all configuration, 1/O and memory registers of the Function 
except those indicated otherwise and reset all internal states of the Function to the 
default or initial condition. 


FLR Completion 


The Initiate FLR bit is reset (cleared) when the FLR reset is completed. This bit can be 
used to indicate to the software that the FLR reset is completed. 


From the time Initiate FLR bit is written to 1, software must wait at least 100 ms before 
accessing the function. 


SMBus Controller (D31:F3) 


The ICH9 provides an System Management Bus (SMBus) 2.0 host controller as well as 
an SMBus Slave Interface. The host controller provides a mechanism for the processor 
to initiate communications with SMBus peripherals (slaves). The |CH9 is also capable of 
operating in a mode in which it can communicate with |?C compatible devices. 


The ICH9 can perform SMBus messages with either packet error checking (PEC) 
enabled or disabled. The actual PEC calculation and checking is performed in hardware 
by the ICH9. 


The Slave Interface allows an external master to read from or write to the ICH9. Write 
cycles can be used to cause certain events or pass messages, and the read cycles can 
be used to determine the state of various status bits. The |CH9’s internal host 
controller cannot access the ICH9’s internal Slave Interface. 


The ICH9 SMBus logic exists in Device 31:Function 3 configuration space, and consists 
of a transmit data path, and host controller. The transmit data path provides the data 
flow logic needed to implement the seven different SMBus command protocols and is 
controlled by the host controller. The |CH9 SMBus controller logic is clocked by RTC 
clock. 


The SMBus Address Resolution Protocol (ARP) is supported by using the existing host 


controller commands through software, except for the new Host Notify command 
(which is actually a received message). 
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Note: 


5.20.1 


5.20.1.1 


The programming model of the host controller is combined into two portions: a PCI 
configuration portion, and a system I/O mapped portion. All static configuration, such 
as the I/O base address, is done via the PCI configuration space. Real-time 
programming of the Host interface is done in system I/O space. 


The |CH9 SMBus host controller checks for parity errors as a target. If an error is 
detected, the detected parity error bit in the PCI Status Register (Device 31: Function 
3: Offset 06h: bit 15) is set. If bit 6 and bit 8 of the PCl Command Register (Device 

31: Function 3: Offset 04h) are set, an SERR# is generated and the signaled SERR# bit 
in the PCI Status Register (bit 14) is set. 


The |CH9 SMBus Controller may stop responding if an SMBus device suddenly stops 
transmitting in the middle of a packet. This could result in unexpected system behavior, 
including a system hang. 


Host Controller 


The SMBus host controller is used to send commands to other SMBus slave devices. 
Software sets up the host controller with an address, command, and, for writes, data 
and optional PEC; and then tells the controller to start. When the controller has finished 
transmitting data on writes, or receiving data on reads, it generates an SMI# or 
interrupt, if enabled. 


The host controller supports 8 command protocols of the SMBus interface (see System 
Management Bus (SMBus) Specification, Version 2.0): Quick Command, Send Byte, 
Receive Byte, Write Byte/Word, Read Byte/Word, Process Call, Block Read/Write, Block 
Write- Block Read Process Call, and Host Notify. 


The SMBus host controller requires that the various data and command fields be setup 
for the type of command to be sent. When software sets the START bit, the SMBus Host 
controller performs the requested transaction, and interrupts the processor (or 
generates an SMI#) when the transaction is completed. Once a START command has 
been issued, the values of the “active registers” (Host Control, Host Command, 
Transmit Slave Address, Data 0, Data 1) should not be changed or read until the 
interrupt status bit (INTR) has been set (indicating the completion of the command). 
Any register values needed for computation purposes should be saved prior to issuing 
of anew command, as the SMBus host controller updates all registers while completing 
the new command. 


The ICH9 supports the System Management Bus (SMBus) Specification, Version 2.0. 
Slave functionality, including the Host Notify protocol, is available on the SMBus pins. 
The SMLink and SMBus signals can be tied together externally depending on the TCO 
mode used. Refer to Section 5.14.2 for more details. 


Using the SMB host controller to send commands to the ICH9’s SMB slave port is not 
supported. 


Command Protocols 


In all of the following commands, the Host Status Register (offset OOh) is used to 
determine the progress of the command. While the command is in operation, the 
HOST_BUSY bit is set. If the command completes successfully, the INTR bit will be set 
in the Host Status Register. If the device does not respond with an acknowledge, and 
the transaction times out, the DEV_ERR bit is set. If software sets the KILL bit in the 
Host Control Register while the command is running, the transaction will stop and the 
FAILED bit will be set. 
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Quick Command 


When programmed for a Quick Command, the Transmit Slave Address Register is sent. 
The PEC byte is never appended to the Quick Protocol. Software should force the 
PEC_EN bit to 0 when performing the Quick Command. Software must force the 
12C_EN bit to 0 when running this command. See section 5.5.1 of the System 
Management Bus (SMBus) Specification, Version 2.0 for the format of the protocol. 


Send Byte / Receive Byte 


For the Send Byte command, the Transmit Slave Address and Device Command 
Registers are sent 

For the Receive Byte command, the Transmit Slave Address Register is sent. The data 
received is stored in the DATAO register. Software must force the 12C_EN bit to 0 when 
running this command. 


The Receive Byte is similar to a Send Byte, the only difference is the direction of data 
transfer. See sections 5.5.2 and 5.5.3 of the System Management Bus (SMBus) 
Specification, Version 2.0 for the format of the protocol. 


Write Byte/ Word 


The first byte of a Write Byte/Word access is the command code. The next 1 or 2 bytes 
are the data to be written. When programmed for a Write Byte/Word command, the 
Transmit Slave Address, Device Command, and Data0 Registers are sent. In addition, 
the Datal Register is sent on a Write Word command. Software must force the 12C_EN 
bit to O when running this command. See section 5.5.4 of the System Management Bus 
(SMBus) Specification, Version 2.0 for the format of the protocol. 


Read Byte/ Word 


Reading data is slightly more complicated than writing data. First the |CH9 must write a 
command to the slave device. Then it must follow that command with a repeated start 
condition to denote a read from that device's address. The slave then returns 1 or 2 
bytes of data. Software must force the 12C_EN bit to 0 when running this command. 


When programmed for the read byte/word command, the Transmit Slave Address and 
Device Command Registers are sent. Data is received into the DATAO on the read byte, 
and the DATO and DATAI1 registers on the read word. See section 5.5.5 of the System 
Management Bus (SMBus) Specification, Version 2.0 for the format of the protocol. 


Process Call 


The process call is so named because a command sends data and waits for the slave to 
return a value dependent on that data. The protocol is simply a Write Word followed by 
a Read Word, but without a second command or stop condition. 


When programmed for the Process Call command, the |CH9 transmits the Transmit 
Slave Address, Host Command, DATAO and DATA1 registers. Data received from the 
device is stored in the DATAO and DATAI1 registers. The Process Call command with 
12C_EN set and the PEC_EN bit set produces undefined results. Software must force 
either 12C_EN or PEC_EN to 0 when running this command. See section 5.5.6 of the 
System Management Bus (SMBus) Specification, Version 2.0 for the format of the 
protocol. 


For process call command, the value written into bit 0 of the Transmit Slave Address 
Register (SMB I/O register, offset 04h) needs to be O. 
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Note: 


Note: 


If the 12C_EN bit is set, the protocol sequence changes slightly: the Command Code 
(bits 18:11 in the bit sequence) are not sent - as a result, the slave will not 
acknowledge (bit 19 in the sequence). 


Block Read/ Write 


The ICH9 contains a 32-byte buffer for read and write data which can be enabled by 
setting bit 1 of the Auxiliary Control register at offset ODh in |/O space, as opposed to a 
single byte of buffering. This 32-byte buffer is filled with write data before 
transmission, and filled with read data on reception. In the |CH9, the interrupt is 
generated only after a transmission or reception of 32 bytes, or when the entire byte 
count has been transmitted/received. 


The byte count field is transmitted but ignored by the ICH9 as software will end the 
transfer after all bytes it cares about have been sent or received. 


For a Block Write, software must either force the |2C_EN bit or both the PEC_EN and 
AAC bits to 0 when running this command. 


The block write begins with a slave address and a write condition. After the command 
code the ICH9 issues a byte count describing how many more bytes will follow in the 
message. If a slave had 20 bytes to send, the first byte would be the number 20 (14h), 
followed by 20 bytes of data. The byte count may not be O. A Block Read or Write is 
allowed to transfer a maximum of 32 data bytes. 


When programmed for a block write command, the Transmit Slave Address, Device 
Command, and Data0 (count) registers are sent. Data is then sent from the Block Data 
Byte register; the total data sent being the value stored in the DataO Register. On block 
read commands, the first byte received is stored in the DataO register, and the 
remaining bytes are stored in the Block Data Byte register. See section 5.5.7 of the 
System Management Bus (SMBus) Specification, Version 2.0 for the format of the 
protocol. 


For Block Write, if the |12C_EN bit is set, the format of the command changes slightly. 
The ICH9 will still send the number of bytes (on writes) or receive the number of bytes 
(on reads) indicated in the DATAO register. However, it will not send the contents of the 
DATAO register as part of the message. Also, the Block Write protocol sequence 
changes slightly: the Byte Count (bits 27:20 in the bit sequence) are not sent - asa 
result, the slave will not acknowledge (bit 28 in the sequence). 


12C Read 


This command allows the ICH9 to perform block reads to certain I2C devices, such as 
serial E*PROMs. The SMBus Block Read supports the 7-bit addressing mode only. 


However, this does not allow access to devices using the |2C “Combined Format” that 
has data bytes after the address. Typically these data bytes correspond to an offset 
(address) within the serial memory chips. 


This command is supported independent of the setting of the 12C_EN bit. The I7C Read 
command with the PEC_EN bit set produces undefined results. Software must force 
both the PEC_EN and AAC bit to 0 when running this command. 


For 12C Read command, the value written into bit 0 of the Transmit Slave Address 
Register (SMB I/O register, offset 04h) needs to be 0. 


The format that is used for the command is shown in Table 5-48. 
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12C Block Read 
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The ICH9 will continue reading data from the peripheral until the NAK is received. 


Block Write- Block Read Process Call 


The block write-block read process call is a two-part message. The call begins with a 
slave address and a write condition. After the command code the host issues a write 
byte count (M) that describes how many more bytes will be written in the first part of 
the message. If a master has 6 bytes to send, the byte count field will have the value 6 
(0000 0110b), followed by the 6 bytes of data. The write byte count (M) cannot be 0. 


The second part of the message is a block of read data beginning with a repeated start 
condition followed by the slave address and a Read bit. The next byte is the read byte 
count (N), which may differ from the write byte count (M). The read byte count (N) 
cannot be 0. 


The combined data payload must not exceed 32 bytes. The byte length restrictions of 
this process call are summarized as follows: 

* M21 byte 

* N21 byte 

« M+N <32 bytes 
The read byte count does not include the PEC byte. The PEC is computed on the total 
message beginning with the first slave address and using the normal PEC 
computational rules. It is highly recommended that a PEC byte be used with the Block 


Write-Block Read Process Call. Software must do a read to the command register 
(offset 2h) to reset the 32 byte buffer pointer prior to reading the block data register. 
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Note: 


5.20.3 


5.20.3.1 


5.20.3.2 


Note that there is no STOP condition before the repeated START condition, and that a 
NACK signifies the end of the read transfer. 


E32B bit in the Auxiliary Control register must be set when using this protocol. 


See section 5.5.8 of the System Management Bus (SMBus) Specification, Version 2.0 
for the format of the protocol. 


Bus Arbitration 


Several masters may attempt to get on the bus at the same time by driving the 
SMBDATA line low to signal a start condition. The |CH9 continuously monitors the 
SMBDATA line. When the ICH9 is attempting to drive the bus to a 1 by letting go of the 
SMBDATA line, and it samples SMBDATA low, then some other master is driving the bus 
and the ICH9 will stop transferring data. 


If the ICH9 sees that it has lost arbitration, the condition is called a collision. The |CH9 
will set the BUS_ERR bit in the Host Status Register, and if enabled, generate an 
interrupt or SMI#. The processor is responsible for restarting the transaction. 


When the ICH9 is a SMBus master, it drives the clock. When the |CH9 is sending 
address or command as an SMBus master, or data bytes as a master on writes, it drives 
data relative to the clock it is also driving. It will not start toggling the clock until the 
start or stop condition meets proper setup and hold time. The ICH9 will also ensure 
minimum time between SMBus transactions as a master. 


The ICH9 supports the same arbitration protocol for both the SMBus and the System 
Management (SMLINK) interfaces. 


Bus Timing 


Clock Stretching 


Some devices may not be able to handle their clock toggling at the rate that the ICH9 
as an SMBus master would like. They have the capability of stretching the low time of 
the clock. When the ICH9 attempts to release the clock (allowing the clock to go high), 
the clock will remain low for an extended period of time. 


The ICH9 monitors the SMBus clock line after it releases the bus to determine whether 
to enable the counter for the high time of the clock. While the bus is still low, the high 
time counter must not be enabled. Similarly, the low period of the clock can be 
stretched by an SMBus master if it is not ready to send or receive data. 


Bus Time Out (Intel® |CH9 as SMBus Master) 


If there is an error in the transaction, such that an SMBus device does not signal an 
acknowledge, or holds the clock lower than the allowed time-out time, the transaction 
will time out. The |CH9 will discard the cycle and set the DEV_ERR bit. The time out 
minimum is 25 ms (800 RTC clocks). The time-out counter inside the ICH9 will start 
after the last bit of data is transferred by the |CH9 and it is waiting for a response. 


The 25 ms timeout counter will not count under the following conditions: 


1. BYTE_DONE_STATUS bit (SMBus I/O Offset 00h, bit 7) is set 


2. The SECOND_TO_STS bit (TCO I/O Offset 06h, bit 1) is not set (this indicates that 
the system has not locked up). 
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5.20.4 Interrupts / SMI# 


The ICH9 SMBus controller uses PIRQB# as its interrupt pin. However, the system can 
alternatively be set up to generate SMI # instead of an interrupt, by setting the 
SMBUS_SMI_EN bit (Device 31: Function 0:Offset 40h: bit 1). 


Table 5-50 and Table 5-51 specify how the various enable bits in the SMBus function 
control the generation of the interrupt, Host and Slave SMI, and Wake internal signals. 
The rows in the tables are additive, which means that if more than one row is true for a 
particular scenario then the Results for all of the activated rows will occur. 


Table 5-49. Enable for SMBALERT# 


SMB_SMI_EN 

cleat (Host SMBALERT_DIS 

(Host Control : : =. 
f Configuration (Slave Command 

1/ O Register, Regi I 2 
Offset 02h egister, / O Register, 
% . D31:F3:Offset Offset 11h, Bit 2) 
40h, Bit 1) 


asserted low Slave SMI# 


(always 
reported in generated 


Host Status (SMBUS_SMI_STS) 
Register, Bit Interrupt 
5) generated 


Table 5-50. Enables for SMBus Slave Write and SMBus Host Events 





SMB_SMI_EN (Host 
Configuration 
Register, 
D31:F3:Offset 40h, 
Bit1) 


INTREN (Host 
Control I/O 
Register, Offset 
02h, Bit 0) 


Siave Write to Wake generated when 


asleep. 
Wake/SMI # 
Conant Slave SMI# generated when 


awake (SMBUS_SMI_STS). 


Slave Write to Slave SMI# generated when 
SMLINK_SLAVE_S in the SO state 


MI Command (SMBUS_SMI_STS) 

MOS status Interrupt generated 

Register [4:11 
asserted Host SMI# generated 
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Table 5-51. Enables for the Host Notify Command 


5.20.5 


5.20.6 


5.20.7 





SMB_SMI_EN 
(Host Config 
Register, 
D31:F3:Off40h, Bit 


HOST_NOTIFY_INTRE 

N (Slave Control I/O 

Register, Offset 11h, 
bit 0) 


HOST_NOTIFY_WKEN 
(Slave Control |/O 
Register, Offset 11h, 
bit 1) 


Wake generated 


Slave SMI# 
generated 
(SMBUS_SMI_STS) 


1) 
a 


SMBALERT# 


SMBALERT# is multiplexed with GPIO[11]. When enable and the signal is asserted, The 
ICH9 can generate an interrupt, an SMI#, or a wake event from S1-S5. 


SMBus CRC Generation and Checking 


If the AAC bit is set in the Auxiliary Control register, the |CH9 automatically calculates 
and drives CRC at the end of the transmitted packet for write cycles, and will check the 
CRC for read cycles. It will not transmit the contents of the PEC register for CRC. The 
PEC bit must not be set in the Host Control register if this bit is set, or unspecified 
behavior will result. 


If the read cycle results in a CRC error, the DEV_ERR bit and the CRCE bit in the 
Auxiliary Status register at offset OCh will be set. 


SMBus Slave Interface 


The |CH9’s SMBus Slave interface is accessed via the SMBus. The SMBus slave logic will 
not generate or handle receiving the PEC byte and will only act as a Legacy Alerting 
Protocol device. The slave interface allows the ICH9 to decode cycles, and allows an 
external microcontroller to perform specific actions. Key features and capabilities 
include: 


¢ Supports decode of three types of messages: Byte Write, Byte Read, and Host 
Notify. 


e Receive Slave Address register: This is the address that the |CH9 decodes. A 
default value is provided so that the slave interface can be used without the 
processor having to program this register. 


« Receive Slave Data register in the SMBus I/O space that includes the data written 
by the external microcontroller. 


¢ Registers that the external microcontroller can read to get the state of the ICH9. 


e Status bits to indicate that the SMBus slave logic caused an interrupt or SMI# due 
to the reception of a message that matched the slave address. 


— Bit 0 of the Slave Status Register for the Host Notify command 
— Bit 16 of the SMI Status Register (Section 13.8.3.15) for all others 
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Note: 


Note: 


5.20.7.1 


Table 5-52. 
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The external microcontroller should not attempt to access the Intel |CH9’s SMBus slave 
logic until either: 


— 800 milliseconds after both: RTCRST# is high and RSMRST# is high, OR 
— The PLTRST# de-asserts 


If a master leaves the clock and data bits of the SMBus interface at 1 for 50 us or more 
in the middle of a cycle, the |CH9 slave logic's behavior is undefined. This is interpreted 
as an unexpected idle and should be avoided when performing management activities 
to the slave logic. 


When an external microcontroller accesses the SMBus Slave Interface over the SMBus 
a translation in the address is needed to accommodate the least significant bit used for 
read/write control. For example, if the |CH9 slave address (RCV_SLVA) is left at 44h 

(default), the external micro controller would use an address of 88h/89h (write/read). 


Format of Slave Write Cycle 

The external master performs Byte Write commands to the |CH9 SMBus Slave I/F. The 
“Command” field (bits 11:18) indicate which register is being accessed. The Data field 
(bits 20:27) indicate the value that should be written to that register. 


Table 5-52 has the values associated with the registers. 


Slave Write Registers 

[reainer [ene 
Command Register. See Table 5-53 below for valid values written to this 
register. 


Data Message Byte 0 


On 


NOTE: The external microcontroller is responsible to make sure that it does not update the 
contents of the data byte registers until they have been read by the system processor. The 
ICH9 overwrites the old value with any new value received. A race condition is possible 
where the new value is being written to the register just at the time it is being read. |CH9 
will not attempt to cover this race condition (i.e., unpredictable results in this case). 
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Table 5-53. Command Types 


Type 


Reserved 


WAKE/ SMI #. This command wakes the system if it is not already awake. If 

system is already awake, an SMI# is generated. 

NOTE: The SMB_WAK_STS bit will be set by this command, even if the system is 
already awake. The SMI handler should then clear this bit. 


Unconditional Powerdown. This command sets the PWRBTNOR_STS bit, and 
has the same effect as the Powerbutton Override occurring. 
HARD RESET WITHOUT CYCLING: This command causes a hard reset of the 


system (does not include cycling of the power supply). This is equivalent to a write 
to the CF9h register with bits 2:1 set to 1, but bit 3 set to 0. 


HARD RESET SYSTEM. This command causes a hard reset of the system 
(including cycling of the power supply). This is equivalent to a write to the CF9h 
register with bits 3:1 set to 1. 


Disable the TCO Messages. This command will disable the Intel® 1CH9 from 

5 sending Heartbeat and Event messages (as described in Section 5.14). Once this 
command has been executed, Heartbeat and Event message reporting can only be 
re-enabled by assertion and deassertion of the RSMRST# signal. 


WD RELOAD: Reload watchdog timer. 


SMLINK_SLV_SMI. When ICH9 detects this command type while in the SO state, 
it sets the SMLINK_SLV_SMI_STS bit (see Section 13.9.5). This command should 
only be used if the system is in an SO state. If the message is received during S1- 
S5 states, the |CH9 acknowledges it, but the SMLINK_SLV_SMI_STS bit does not 
get set. 

NOTE: It is possible that the system transitions out of the SO state at the same 
time that the SMLINK_SLV_SMI command is received. In this case, the 
SMLINK_SLV_SMI_STS bit may get set but not serviced before the system 
goes to sleep. Once the system returns to SO, the SMI associated with this 
bit would then be generated. Software must be able to handle this scenario. 
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5.20.7.2 Format of Read Command 


The external master performs Byte Read commands to the |CH9 SMBus Slave 
interface. The “Command” field (bits 18:11) indicate which register is being accessed. 
The Data field (bits 30:37) contain the value that should be read from that register. 


Table 5-54. Slave Read Cycle Format 


2-8 Slave Address - 7 bits External Microcontroller Mast mately) une I REE ES lave 
Address register 


External Microcontroller | Always 0 


Indicates which register is being 
11-18 | Command code - 8 bits | External Microcontroller | accessed. See Table 5-55 below 
for list of implemented registers. 


20 Repeated Start External Microcontroller Pe 
8 


21-27 | Slave Address - 7 bits External Microcontroller MUSt Maren value I RET ENE ave 
Address register 


2 External Microcontroller | Always 1 


ACK 
Value depends on register being 
30-37 | Data Byte Intel |CH9 accessed. Table 5-55 below for list 
of implemented registers. 


Table 5-55. Data Values for Slave Read Registers (Sheet 1 of 3) 


A 
7 . 


Reserved for capabilities indication. Should always return OOh. Future 





chips may return another value to indicate different capabilities. 


po | 70 | 
System Power State 
1 2:0 000 = SO 001 = S1 010 = Reserved 011 = S3 
100 = S4 101 = S5 110 = Reserved 111 = Reserved 


as reeves 


resents 


Watchdog Timer current value Note that Watchdog Timer has 10 bits, 
3 5:0 but this field is only 6 bits. If the current value is greater than 3Fh, ICH9 
will always report 3Fh in this field. 
SO 


1 = The Intruder Detect (INTRD_DET) bit is set. This indicates that the 
system cover has probably been opened. 





240 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


® 
Functional Description [ n tel 


Table 5-55. Data Values for Slave Read Registers (Sheet 2 of 3) 


Presi Tennis 


1 = BTl Temperature Event occurred. This bit will be set if the Intel 
ICH9’s THRM# input signal is at a valid low voltage state. This bit will be 
1 clear if the THRM# input signal is at a valid high voltage state. 
NOTE: This bit interprets the behavior if the THRM# pin as active low. 
This bit is set independent of the TRM#_POL bit setting. 


—_—_ DOA CPU Status. This bit will be 1 to indicate that the processor is dead 


1 = SECOND_TO_STS bit set. This bit will be set after the second time- 
out (SECOND_TO_ “STS bit) of the Watchdog Timer occurs. 


Wa Reserved. Will always be 0, but software should ignore. 


Reflects the value of the GPIO[11]/SMBALERT#¥ pin (and is dependent 
upon the value of the GPI_INV[11] bit. If the GPI_INV[11] bit is 1, then 
the value in this bit equals the level of the GPI[11]/SMBALERT# pin 

7 | (high = 1, low = 0). 
If the GPI_INV[11] bit is 0, then the value of this bit will equal the inverse 
of the level of the GPIO[11]/SMBALERT# pin (high = 0, low = 1). 


FWH bad bit. This bit will be 1 to indicate that the FWH read returned 
FFh, which indicates that it is probably blank. 


FT Battery Low Status. ‘1’ if the BATLOW# pin is a ‘0’. (Mobile Only) 


CPU Power Failure Status: ‘1’ if the CPUPWR_FLR bit in the 
GEN_PMCON_2 register is set. 


INI T# due to receiving Shutdown message: This event is visible from 
the reception of the shutdown message until a platform reset is done if 

3 the Shutdown Policy Select bit (SPS) is configured to drive INIT#. When 
the SPS bit is configured to generate PLTRST# based on shutdown, this 
register bit will always return 0. 
Events on signal will not create a event message 

a 

POWER_OK_BAD: Indicates the failure core power well ramp during 

5 boot/resume. This bit will be active if the SLP_S3# pin is de-asserted and 
PWROK pin is not asserted. 
Thermal Trip: This bit will shadow the state of processor Thermal Trip 
status bit (CTS) (16.2.1.2, GEN_PMCON_2, bit 3). Events on signal will 
not create a event message 


Reserved: Default value is “X” 
7 Note: Software should not expect a consistent value when this bit is read 
through SMBUS/SMLINK 
7:0 Contents of the Message 1 register. Refer to Section 13.9.8 for the 
, description of this register. 
Contents of the Message 2 register. Refer to Section 13.9.8 for the 
7 7:0 ioe ; ; 
description of this register. 
7:0 Contents of the TCO_WDCNT register. Refer to Section 13.9.9 for the 
, description of this register. 


[3 [Fe [seconssortneme SSCS 
[8 [78 fousottente SSCS 
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Table 5-55. Data Values for Slave Read Registers (Sheet 3 of 3) 


5.20.7.2.1 


Note: 


5.20.7.3 
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“Day of Month” of the RTC 


Month of the RTC 
Year of the RTC 





Behavioral Notes 


According to SMBus protocol, Read and Write messages always begin with a Start bit - 
Address- Write bit sequence. When the |CH9 detects that the address matches the 
value in the Receive Slave Address register, it will assume that the protocol is always 
followed and ignore the Write bit (bit 9) and signal an Acknowledge during bit 10. In 
other words, if a Start -Address- Read occurs (which is invalid for SMBus Read or Write 
protocol), and the address matches the ICH9’s Slave Address, the ICH9 will still grab 
the cycle. 


Also according to SMBus protocol, a Read cycle contains a Repeated Start-Address- 
Read sequence beginning at bit 20. Once again, if the Address matches the ICH9’s 
Receive Slave Address, it will assume that the protocol is followed, ignore bit 28, and 
proceed with the Slave Read cycle. 


An external microcontroller must not attempt to access the |CH9’s SMBus Slave logic 
until at least 1 second after both RTCRST# and RSMRST# are deasserted (high). 


Slave Read of RTC Time Bytes 


The |CH9 SMBus slave interface allows external SMBus master to read the internal 
RTC’s time byte registers. 


The RTC time bytes are internally latched by the |CH9’s hardware whenever RTC time is 
not changing and SMBus is idle. This ensures that the time byte delivered to the slave 
read is always valid and it does not change when the read is still in progress on the bus. 
The RTC time will change whenever hardware update is in progress, or there is a 
software write to the RTC time bytes. 


The ICH9 SMBus slave interface only supports Byte Read operation. The external 
SMBus master will read the RTC time bytes one after another. It is software’s 
responsibility to check and manage the possible time rollover when subsequent time 
bytes are read. 


For example, assuming the RTC time is 11 hours: 59 minutes: 59 seconds. When the 
external SMBus master reads the hour as 11, then proceeds to read the minute, it is 
possible that the rollover happens between the reads and the minute is read as 0. This 
results in 11 hours: 0 minute instead of the correct time of 12 hours: 0 minutes. Unless 
it is certain that rollover will not occur, software is required to detect the possible time 
rollover by reading multiple times such that the read time bytes can be adjusted 
accordingly if needed. 
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5.20.7.4 


Note: 


Table 5-56. 


Format of Host Notify Command 


The ICH9 tracks and responds to the standard Host Notify command as specified in the 
System Management Bus (SMBus) Specification, Version 2.0. The host address for this 
command is fixed to 0001000b. If the ICH9 already has data for a previously- received 
host notify command which has not been serviced yet by the host software (as 
indicated by the HOST_NOTIFY_STS bit), then it will NACK following the host address 
byte of the protocol. This allows the host to communicate non-acceptance to the 
master and retain the host notify address and data values for the previous cycle until 
host software completely services the interrupt. 


Host software must always clear the HOST_NOTIFY_STS bit after completing any 
necessary reads of the address and data registers. 


Table 5-56 shows the Host Notify format. 


Host Notify Format 


Ea 


Indicates the address of the master; 
Device Address - 7 bits External Master | loaded into the Notify Device Address 
Register 


Unused — Always 0 Evternal Master 7-bit-only address; this bit is inserted 
to complete the byte 
27:20 | Data Byte Low — 8 bits External Master paged a a 
Register 
ics Pp 


36:29 | Data Byte High — 8 bits so Hie pny Bota Miah Byte 


[aston nat este 
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Intel® High Definition Audio Overview 


The ICH9’s High Definition Audio (HDA) controller communicates with the external 
codec(s) over the Intel High Definition Audio serial link. The controller consists of a set 
of DMA engines that are used to move samples of digitally encoded data between 
system memory and an external codec(s). The |CH9 implements four output DMA 
engines and 4 input DMA engines. The output DMA engines move digital data from 
system memory to a D-A converter in a codec. |CH9 implements a single Serial Data 
Output signal (HDA_SDOUT) that is connected to all external codecs. The input DMA 
engines move digital data from the A-D converter in the codec to system memory. The 
ICH9 implements four Serial Digital Input signals (HDA_SDI[3:0]) supporting up to 
four codecs. 


Audio software renders outbound and processes inbound data to/from buffers in 
system memory. The location of individual buffers is described by a Buffer Descriptor 
List (BDL) that is fetched and processed by the controller. The data in the buffers is 
arranged in a predefined format. The output DMA engines fetch the digital data from 
memory and reformat it based on the programmed sample rate, bit/sample and 
number of channels. The data from the output DMA engines is then combined and 
serially sent to the external codecs over the Intel High Definition Audio link. The input 
DMA engines receive data from the codecs over the Intel High Definition Audio link and 
format the data based on the programmable attributes for that stream. The data is 
then written to memory in the predefined format for software to process. Each DMA 
engine moves one stream of data. A single codec can accept or generate multiple 
streams of data, one for each A-D or D-A converter in the codec. Multiple codecs can 
accept the same output stream processed by a single DMA engine. 


Codec commands and responses are also transported to and from the codecs via DMA 
engines. 


Intel® High Definition Audio Docking (Mobile Only) 


Dock Sequence 


Note that this sequence is followed when the system is running and a docking event 
occurs. 


1. Since the |CH9 supports docking, the Docking Supported (DCKSTS. DS) bit defaults 
to a1. POST BIOS and ACPI BIOS software uses this bit to determine if the HD 
Audio controller supports docking. BIOS may write a 0 to this RWO bit during POST 
to effectively turn off the docking feature. 


2. After reset in the undocked quiescent state, the Dock Attach (DCKCTL.DA) bit and 
the Dock Mate (DCKSTS.DM) bit are both de-asserted. The HDA_DOCK_EN# signal 
is de-asserted and HDA_DOCK_RST# is asserted. Bit Clock, SYNC and SDO signals 
may or may no be running at the point in time that the docking event occurs. 


3. The physical docking event is signaled to ACPI BIOS software via ACPI control 
methods. This is normally done through a GPIO signal on the ICH9 and is outside 
the scope of this section of the spec. 


4. ACPI BIOS software first checks that the docking is supported via DCKSTS.DS=1 
and that the DCKSTS.DM=0 and then initiates the docking sequence by writing a 1 
to the DCKCTL.DA bit. 


5. The HD Audio controller then asserts the HDA_DOCK_EN# signal so that the Bit 
Clock signal begins toggling to the dock codec. HDA_DOCK_EN# shall be asserted 
synchronously to Bit Clock and timed such that Bit Clock is low, SYNC is low, and 
SDO is low. Pull-down resistors on these signals in the docking station discharge 
the signals low so that when the state of the signal on both sides of the switch is 
the same when the switch is turned on. This reduces the potential for charge 
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5.21.1.2 


10. 


coupling glitches on these signals. Note that in the ICH9 the first 8 bits of the 
Command field are “reserved” and always driven to 0's. This creates a predictable 
point in time to always assert HDA_DOCK_EN#. Note that the HD Audio link reset 
exit specification that requires that SYNC and SDO be driven low during Bit Clock 
startup is not ensured. Note also that the SDO and Bit Clock signals may not be low 
while HDA_DOCK_RST# is asserted which also violates the spec. 


. After the controller asserts HDA_DOCK_EN# it waits for a minimum of 2400 Bit 


Clocks (100us) and then de-asserts HDA_DOCK_RST#. This is done in such a way 
to meet the HD Audio link reset exit specification. HDA_DOCK_RST# de-assertion 
should be synchronous to Bit Clock and timed such that there are least 4 full Bit 
ClockS from the de-assertion of HDA_DOCK_RST# to the first frame SYNC 
assertion. 


. The Connect/Turnaround/Address Frame hardware initialization sequence will now 


occur on the dock codecs' SDI signals. A dock codec is detected when SDI is high 
on the last Bit Clock cycle of the Frame Sync of a Connect Frame. The appropriate 
bit(s) in the State Change Status (STATESTS) register will be set. The Turnaround 
and Address Frame initialization sequence then occurs on the dock codecs' SDI(s). 


. After this hardware initialization sequence is complete (approximately 32 frames), 


the controller hardware sets the DCKSTS.DM bit to 1 indicating that the dock is now 
mated. ACPI BIOS polls the DCKSTS.DM bit and when it detects it is set to 1, 
conveys this to the OS through a plug-N-play IRP. This eventually invokes the HD 
Audio Bus Driver, which then begins it's codec discovery, enumeration, and 
configuration process. 


. Alternatively to step #8, the HD Audio Bus Driver may choose to enable an 


interrupt by setting the WAKEEN bits for SDINs that didn't originally have codecs 
attached to them. When a corresponding STATESTS bit gets set an interrupt will be 
generated. In this case the HD Audio Bus Driver is called directly by this interrupt 
instead of being notified by the plug-N-play IRP. 


HD Audio Bus Driver software “discovers” the dock codecs by comparing the bits 
now Set in the STATESTS register with the bits that were set prior to the docking 
event. 


Exiting D3/ CRST# when Docked 


1. 


In D3/CRST#, CRST# is asserted by the HD Audio Bus Driver. CRST# asserted 
resets the dock state machines, but does not reset the DCKCTL.DA bit. Because the 
dock state machines are reset, the dock is electrically isolated (HDA_DOCK_EN# 
de-asserted) and DOCK_RST# is asserted. 


. The Bus Driver clears the STATESTS bits, then de-asserts CRST#, waits 


approximately 7ms, then checks the STATESTS bits to see which codecs are 
present. 


. When CRST# is de-asserted, the dock state machine detects that DCKCTL.DA is 


still set and the controller hardware sequences through steps to electrically connect 
the dock by asserting HDA_DOCK_EN# and then eventually de-asserts 
DOCK_RST#. This completes within the 7ms mentioned in step 2). 


4. The Bus Driver enumerates the codecs present as indicated via the STATESTS bits. 


. Note that this process did not require BIOS or ACPI BIOS to set the DCKCTL.DA bit. 
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Functional Description 


Cold Boot/ Resume from S3 When Docked 


1. 


N 


5. 


When booting and resuming from S3, PLTRST# switches from asserted to de- 
asserted. This clears the DCKCTL.DA bit and the dock state machines. Because the 
dock state machines are reset, the dock is electrically isolated (HDA_DOCK_EN# 
de-asserted) and DOCK_RST# is asserted. 


. POST BIOS detects that the dock is attached and sets the DCKCTL.DA bit to 1. Note 


that at this point CRST# is still asserted so the dock state machine will remain in 
it's reset state. 

The Bus Driver clears the STATESTS bits, then de-asserts CRST#, waits 
approximately 7ms, then checks the STATESTS bits to see which codecs are 
present. 

When CRST# is de-asserted, the dock state machine detects that DCKCTL.DA is 
still set and the controller hardware sequences through steps to electrically connect 
the dock by asserting HDA_DOCK_EN# and then eventually de-asserts 
DOCK_RST#. This completes within the 7ms mentioned in step 3). 


The Bus Driver enumerates the codecs present as indicated via the STATESTS bits. 


Undock Sequence 


There are two possible undocking scenarios. The first is the one that is initiated by the 
user that invokes software and gracefully shuts down the dock codecs before they are 
undocked. The second is referred to as the “surprise undock” where the user undocks 
while the dock codec is running. Both of these situations appear the same to the 
controller as it is not cognizant of the “surprise removal”. But both sequences will be 
discussed here. 


Normal Undock 


1. 


In the docked quiescent state, the Dock Attach (DCKCTL.DA) bit and the Dock Mate 
(DCKSTS.DM) bit are both asserted. The HDA_DOCK_EN# signal is asserted and 
HDA_DOCK_RST# is de-asserted. 


The user initiates an undock event through the GUI interface or by pushing a 
button. This mechanism is outside the scope of this section of the document. Either 
way ACPI BIOS software will be invoked to manage the undock process. 


ACPI BIOS will call the HD Audio Bus Driver software in order to halt the stream to 
the dock codec(s) prior to electrical undocking. If the HD Audio Bus Driver is not 
capable of halting the stream to the docked codec, ACPI BIOS will initiate the 
hardware undocking sequence as described in the next step while the dock stream 
is still running. From this standpoint, the result is similar to the “surprise undock” 
scenario where an audio glitch may occur to the docked codec(s) during the undock 
process. 


. The ACPI BIOS initiates the hardware undocking sequence by writing a 0 to the 


DCKCTL.DA bit. 


. The HD Audio controller asserts HDA_DOCK_RST#. HDA_DOCK_RST# assertion 


shall be synchronous to Bit Clock. There are no other timing requirements for 
HDA_DOCK_RST# assertion. Note that the HD Audio link reset specification 
requirement that the last Frame sync be skipped will not be met. 


. A minimum of 4 Bit Clocks after HDA_DOCK_RST# the controller will de-assert 


HDA_DOCK_EN# to isolate the dock codec signals from the |CH9 HD Audio link 
signals. HDA_DOCK_EN# is de-asserted synchronously to Bit Clock and timed such 
that Bit Clock, SYNC, and SDO are low. 


. After this hardware undocking sequence is complete the controller hardware clears 


the DCKSTS.DM bit to 0 indicating that the dock is now un-mated. ACPI BIOS 
software polls DCKSTS.DM and when it sees DM set, conveys to the end user that 
physical undocking can proceed. The controller is now ready for a subsequent 
docking event. 
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Surprise Undock 


1. In the surprise undock case the user undocks before software has had the 
opportunity to gracefully halt the stream to the dock codec and initiate the 
hardware undock sequence. 


2. A signal on the docking connector is connected to the switch that isolates the dock 
codec signals from the |CH9 HD Audio link signals (DOCK_DET# in the conceptual 
diagram). When the undock event begins to occur the switch will be put into isolate 
mode. 


3. The undock event is communicated to the ACPI BIOS via ACPI control methods that 
are outside the scope of this section of the document. 


4. ACPI BIOS software writes a 0 to the DCKCTL.DA bit. ACPI BIOS then calls the HD 
Audio Bus Driver via plug-N-play IRP. The Bus Driver then posthumously cleans up 
the dock codec stream. 


5. The HD Audio controller hardware is oblivious to the fact that a surprise undock 
occurred. The flow from this point on is identical to the normal undocking sequence 
described in section O starting at step 3). It finishes with the hardware clearing the 
DCKSTS.DM bit set to 0 indicating that the dock is now un-mated. The controller is 
now ready for a subsequent docking event. 


Interaction Between Dock/ Undock and Power Management States 


When exiting from S3, PLTRST# will be asserted. The POST BIOS is responsible for 
initiating the docking sequence if the dock is already attached when PLTRST# is de- 
asserted. POST BIOS writes a 1 to the DCKCTL.DA bit prior to the HD Audio driver de- 
asserting CRTS# and detecting and enumerating the codecs attached to the 
HDA_DOCK_RST# signal. The HD Audio controller does not directly monitor a hardware 
signal indicating that a dock is attached. Therefore a method outside the scope of this 
document must be used to cause the POST BIOS to initiate the docking sequence. 


When exiting from D3, CRST# will be asserted. When CRST# bit is “O” (asserted), the 
DCKCTL.DA bit is not cleared. The dock state machine will be reset such that 
HDA_DOCK_EN# will be de-asserted, HDA_DOCK_RST# will be asserted and the 
DCKSTS.DM bit will be cleared to reflect this state. When the CRST# bit is de-asserted, 
the dock state machine will detect that DCKCTL.DA is set to “1” and will begin 
sequencing through the dock process. Note that this does not require any software 
intervention. 


Relationship between HDA_DOCK_RST# and HDA_RST# 


HDA_RST# will be asserted when a PLTRST# occurs or when the CRST# bit is 0. As 
long as HDA_RST# is asserted, the DOCK_RST# signal will also be asserted. 


When PLTRST# is asserted, the DCKCTL.DA and DCKSTS.DM bits will be get cleared to 
their default state (0's), and the dock state machine will be reset such that 
HDA_DOCK_EN# will be de-asserted, and HDA_DOCK_RST# will be asserted. After any 
PLTRST#, POST BIOS software is responsible for detecting that a dock is attached and 
then writing a “1” to the DCKCTL.DA bit prior to the HD Audio Bus Driver de-asserting 
CRST#. 


When CRST# bit is “0” (asserted), the DCKCTL.DA bit is not cleared. The dock state 
machine will be reset such that HDA_DOCK_EN# will be de-asserted, 
HDA_DOCK_RST# will be asserted and the DCKSTS.DM bit will be cleared to reflect this 
state. When the CRST# bit is de-asserted, the dock state machine will detect that 
DCKCTL.DA is set to “1” and will begin sequencing through the dock process. Note that 
this does not require any software intervention. 
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Function Level Reset Support (FLR) 


The Intel® High Definition Audio Controller supports the Function Level Reset (FLR) 
capability. The FLR capability can be used in conjunction with Intel Virtualization 
Technology. FLR allows an Operating System in a Virtual Machine to have complete 
control over a device, including its initialization, without interfering with the rest of the 
platform. The device provides a software interface that enables the Operating System 
to reset the whole device as if a PCI reset was asserted. 


FLR Steps 


FLR Initialization 


1. A FLR is initiated by software writing a ‘1’ to the Initiate FLR bit. 


2. All subsequent requests targeting the Function will not be claimed and will be 
Master Abort Immediate on the bus. This includes any configuration, I/O or 
Memory cycles, however, the Function shall continue to accept completions 
targeting the Function. 


FLR Operation 


The Function will Reset all configuration, 1/O and memory registers of the Function 
except those indicated otherwise and reset all internal states of the Function to the 
default or initial condition. 


FLR Completion 


The Initiate FLR bit is reset (cleared) when the FLR reset is completed. This bit can be 
used to indicate to the software that the FLR reset is completed. 


From the time Initiate FLR bit is written to 1, software must wait at least 100 ms before 
accessing the function. 


Intel® Active Management Technology (Intel® 
AMT) (Digital Office Only) 


Intel Active Management Technology is a set of advanced manageability features 
developed as a direct result of IT customer feedback gained through Intel market 
research. Reducing the Total Cost of Ownership (TCO) through improved asset tracking, 
remote manageability, and fewer desk-side visits were identified as key IT priorities. 
Intel AMT extends the capabilities of existing management solutions by making the 
asset information, remote diagnostics, recovery and contain capabilities always 
available, or Out of Band (OOB), even when the system is in a low-power “off” state or 
the OS is hung. 


Another feature of Intel AMT is System Defense. System Defense is used to stop the 
propagation of worms and viruses. Programmable packet filters in the integrated LAN 
Controller are used to accomplish this. These filters inspect all incoming and all 
outgoing packets and decide whether to block or pass the packets as configured. There 
is no indication to the host that a packet has been blocked or accepted. 


The logic can be used to accept or block reception to host or transmission to network 
paths. Additionally, counter logic can be used to count the number or filter matches for 
a given filter. This feature allows for statistical sampling of connections as well as rate 
limiting of connections. 
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Intel® AMT Features 


¢ E-Asset Tag 

¢ OOB HW and SW Inventory Logs 

¢ OOB Alerts 

¢ IDE Redirect 

¢ Serial over LAN for Remote Control 
« Remote Diagnostics Execution 

¢ OS Lock-Up Alert 

¢ OS Repair 

e Remote BIOS Recovery and Update 


Intel® AMT Requirements 


Intel AMT is a platform-level solution that utilizes multiple system components 
including: 


* Intel AMT-Ready |CH9 component 


* Intel Gigabit Ethernet PHY (Intel® 82566 Gigabit Platform LAN Connect device) 
with Intel Active Management Technology for remote access 


¢ SPI flash memory with 4KB or 8KB sector erase that meets requirements set in 
Section 5.23.4 (32 Mb minimum for Intel AMT) to store asset information, 
management software code, and logs 


¢ BIOS to provide asset detection and POST diagnostics (BIOS and Intel AMT can 
optionally share same flash memory device) 


Familiar |SV software packages to take advantage of Intel AMT’s platform 
management capabilities 


Serial Peripheral I nterface (SPI) 


The Serial Peripheral Interface (SPI) is a 4-pin interface that provides a potentially 
lower-cost alternative for system flash versus the Firmware Hub on the LPC bus. 


The 4-pin SPI interface consists of clock (CLK), master data out (Master Out Slave In 
(MOSI)), master data in (Master In Slave Out (MISO)) and an active low chip select 
(SPI_CS[1:0]#). 

The ICH9 supports up to two SPI flash devices using two separate Chip Select pins. 
Each SPI flash device can be up to 16 MBytes. The ICH9 SPI interface supports 20 MHz 
and 33 MHz SPI devices. 


Communication on the SPI bus is done with a Master - Slave protocol. The Slave is 
connected to the ICH9 and is implemented as a tri-state bus. 


When SPI is selected by the Boot BIOS Destination Strap and a SPI device is detected 
by the ICH9, LPC based BIOS flash is disabled. 


SPI Supported Feature Overview 


SPI Flash on the ICH9 has two operational modes, descriptor and non-descriptor. 
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Non-Descriptor Mode 


Non-descriptor mode is similar to the flash functionality of |CH7. In this mode, SPI 
Flash can only be used for BIOS. Direct read and writes are not supported. BIOS has 
read/write access only through register accesses. Through those register accesses 
BIOS can read and write to the entire flash without security checking. There is also no 
support for the integrated Gigabit Ethernet, Management Engine, as well multiple SPI 
Flash components. 


Descriptor Mode 


Descriptor Mode enables many new features of the chipset: 
¢ Integrated Gigabit Ethernet and Host processor for Gigabit Ethernet Software 
* Intel® Active Management Technology (Digital Office Only) 
* Intel® Quiet System Technology 
¢« Supports two SPI Flash components using two separate chip select pins 
¢ Hardware enforced security restricting master accesses to different regions 


¢ Chipset Soft Strap region provides the ability to use Flash NVM as an alternative to 
hardware pull-up/pull-down resistors for both |CH and MCH 


¢ Supports the SPI Fast Read instruction and frequencies of 33 MHz 
¢ Uses standardized Flash Instruction Set 


SPI Flash Regions 


In Descriptor Mode the Flash is divided into five separate regions: 


| 0 | Flash Descriptor 


Management Engine 
Gigabit Ethernet 
| 4 Platform Data 


Only three masters can access the four regions: Host processor running BIOS code, 
Integrated Gigabit Ethernet and Host processor running Gigabit Ethernet Software, and 
Management Engine. The only required region is Region 0, the Flash Descriptor. Region 
0 must be located in the first sector of device 0 (offset 0). 





Flash Region Sizes 


SPI flash space requirements differ by platform and configuration. The Flash Descriptor 
requires one 4 KB or larger block. GbE requires two 4 KB or larger blocks. The Platform 
Data Region is 32 KB. The amount of flash space consumed is dependent on the erase 
granularity of the flash part and the platform requirements for the ME and BIOS 
regions. The ME region will contain firmware to support Intel® Advanced Fan Speed 
Control, Intel® Active Management Technology (Digital Office only), ASF 2.0 and 
integrated Trusted Platform Module (mobile only). 
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Table 5-57. Region Size versus Erase Granularity of Flash Components 


: : Size with 8 KB : 
Region Size with 4 KB Blocks (Mobile Size with 64 KB 
Blocks Only) Blocks 


5.23.1.3 Device Partitioning 





The ICH9 SPI Flash controller supports two sets of attributes in SPI flash space. This 
allows for supporting an asymmetric flash component that has two separate sets of 
attributes in the upper and lower part of the memory array. An example of this is a 
flash part that has different erase granularities in two different parts of the memory 
array. This allows for the usage of two separate flash vendors if using two different 
flash parts. 


Figure 5-16. Flash Partition Boundary 





5.23.2 Flash Descriptor 


The maximum size of the Flash Descriptor is 4 KB. If the block/sector size of the SPI 
flash device is greater than 4 KB, the flash descriptor will only use the first 4 KB of the 
first block. The flash descriptor requires its own block at the bottom of memory 
(Ox00h). The information stored in the Flash Descriptor can only be written during the 
manufacturing process as its read/write permissions must be set to Read only when the 
computer leaves the manufacturing floor. 


The Flash Descriptor is made up of eleven sections: 
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Figure 5-17. Flash Descriptor Sections 


Functional Description 


OEM Section 





Reserved 


ICH Soft 
Straps 


Component 




















Signature 





1. The Flash signature selects Descriptor Mode as well as verifies if the flash is 


programmed and functioning. The data at the bottom of the flash (offset 0) must be 
OFFOA55Ah in order to be in Descriptor mode. 


2. The Descriptor map has pointers to the other five descriptor sections as well as the 
size of each. 
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3. The component section has information about the SPI flash in the system including: 
the number of components, density of each, invalid instructions (such as chip 
erase), and frequencies for read, fast read and write/erase instructions. 


4. The Region section points to the three other regions as well as the size of each 
region. 


5. The master region contains the security settings for the flash, granting read/write 
permissions for each region and identifying each master by a requestor ID. See 
Section 5.23.2.1 for more information. 


6 & 7. The MCH and ICH chipset soft strap sections contain MCH and ICH configurable 
parameters. 


8. The Reserved region between the top of the MCH strap section and the bottom of 
the OEM Section is reserved for future chipset usages. 


9 . The Descriptor Upper MAP determines the length and base address of the 
Management Engine VSCC Table. 


10. The Management Engine VSCC Table holds the JEDEC ID and the VSCC information 
of the entire SPI Flash supported by the NVM image. 


11. OEM Section is 256 Bytes reserved at the top of the Flash Descriptor for use by 
OEM. 


5.23.2.1 Descriptor Master Region 


The master region defines read and write access setting for each region of the SPI 
device. The master region recognizes three masters: BIOS, Gigabit Ethernet, and 
Management Engine. Each master is only allowed to do direct reads of its primary 
regions. 


Table 5-58. Region Access Control Table 


Master Read/ Write Access 


CPU and BIOS ME/ MCH GbE Controller 
[—Beserintor [WA WA 


CPU and BIOS can 
always read from and Read / Write Read / Write 
write to BIOS Region 


ME can always read 
Management Read / Write from and write to ME Read / Write 
Engine : 
Region 
GbE software can 
Gigabit Ethernet Read / Write Read / Write always read from and 
write to GbE region 
Platform Data 
Region 
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Flash Access 
There are two types of flash accesses: 


Direct Access: 
¢ Masters are allowed to do direct read only of their primary region 


— Gigabit Ethernet region can only be directly accessed by the Gigabit Ethernet 
controller. Gigabit Ethernet software must use Program Registers to access the 
Gigabit Ethernet region. 


e Master's Host or Management Engine virtual read address is converted into the SPI 
Flash Linear Address (FLA) using the Flash Descriptor Region Base/Limit registers 
Program Register Access: 


¢« Program Register Accesses are not allowed to cross a 4KB boundary and can not 
issue a command that might extend across two components 


¢ Software programs the FLA corresponding to the region desired 


— Software must read the devices Primary Region Base/Limit address to create a 
FLA. 


Direct Access Security 


¢ Requester ID of the device must match that of the primary Requester ID in the 
Master Section 


¢ Calculated Flash Linear Address must fall between primary region base/limit 
¢ Direct Write not allowed 
¢« Direct Read Cache contents are reset to 0's on a read from a different master 


— Supports the same cache flush mechanism in |CH7 which includes Program 
Register Writes 


Register Access Security 


* Only primary region masters can access the registers 


Processor running Gigabit Ethernet software can access Gigabit Ethernet registers 


¢ Masters are only allowed to read or write those regions they have read/write 
permission 


¢« Using the Flash Region Access Permissions, one master can give another master 
read/write permissions to their area 


¢ Using the five Protected Range registers, each master can add separate read/write 
protection above that granted in the Flash Descriptor for their own accesses 


— Example: BIOS may want to protect different regions of BIOS from being 
erased 


— Ranges can extend across region boundaries 
Serial Flash Device Compatibility Requirements 
A variety of serial flash devices exist in the market. For a serial flash device to be 


compatible with the Intel |CH9 SPI bus, it must meet the minimum requirements 
detailed in the following sections. 
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Intel® 1CH9 SPI Based BIOS Requirements 
A serial flash device must meet the following minimum requirements when used 
explicitly for system BIOS storage. 


e Erase size capability of at least one of the following: 64 Kbytes, 8 Kbytes, 4 Kbytes, 
or 256 bytes. 


« Device must support multiple writes to a page without requiring a preceding erase 
cycle (Refer to Section 5.23.5) 


¢ Serial flash device must ignore the upper address bits such that an address of 
FFFFFFh aliases to the top of the flash memory. 


« SPI Compatible Mode 0 support (clock phase is 0 and data is latched on the rising 
edge of the clock). 


¢ If the device receives a command that is not supported or incomplete (less than 8 
bits), the device must complete the cycle gracefully without any impact on the flash 
content. 


e« An erase command (page, sector, block, chip, etc.) must set all bits inside the 
designated area (page, sector, block, chip, etc.) to 1 (Fh). 


« Status Register bit 0 must be set to 1 when a write, erase or write to status register 
is in progress and cleared to 0 when a write or erase is NOT in progress. 


¢« Devices requiring the Write Enable command mst automatically clear the Write 
Enable Latch at the end of Data Program instructions. 


¢ Byte write must be supported. The flexibility to perform a write between 1 byte to 
64 bytes is recommended. 


¢« Hardware Sequencing requirements are optional in BIOS only platforms. 


¢ SPI flash parts that do not meet Hardware sequencing command set requirements 
may work in BIOS only platforms via software sequencing. 


Integrated LAN Firmware SPI Flash Requirements 
A serial flash device that will be used for system BIOS and Integrated LAN or 
Integrated LAN only must meet all the SPI Based BIOS Requirements plus: 

¢ Hardware sequencing 

¢ 4, 8 or 64 KBytes erase capability must be supported. 


SPI Flash Unlocking Requirements for Integrated LAN 


BIOS must ensure there is no SPI flash based read/write/erase protection on the GbE 
region. GbE firmware and drivers for the integrated LAN need to be able to read, write 
and erase the GbE region at all times. 


Intel® Management Engine Firmware SPI Flash Requirements 
Intel Management Engine Firmware must meet the SPI flash based BIOS Requirements 
plus: 

¢ Hardware Sequencing. 


¢ Flash part must be uniform 4 KB erasable block throughout the entire device or for 
desktop platform only, the flash part may have 64 KB blocks with the first block 
(lowest address) divided into 4 KB or 8 KB blocks. 


e Write protection scheme must meet SPI flash unlocking requirements for 
Management Engine. 
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SPI Flash Unlocking Requirements for Management Engine 


Flash devices must be globally unlocked (read, write and erase access on the ME 
region) from power on by writing 0Oh to the flash’s status register to disable write 
protection. 


If the status register must be unprotected, it must use the enable write status register 
command 50h or write enable 06h. 


Opcode O1Lh (write to status register) must then be used to write a single byte of 00h 
into the status register. This must unlock the entire part. If the SPI flash’s status 
register has non-volatile bits that must be written to, bits [5:2] of the flash’s status 
register must be all Oh to indicate that the flash is unlocked. 


If there is no need to execute a write enable on the status register, then opcodes 06h 
and 50h must be ignored. 


After global unlock, BIOS has the ability to lock down small sections of the flash as long 
as they do not involve the ME or GbE region. 


Hardware Sequencing Requirements 


The following table contains a list of commands and the associated opcodes that a SPI- 
based serial flash device must support in order to be compatible with hardware 
sequencing. 


Hardware Sequencing Commands and Opcode Requirements 


[—commanss [oni Pee 


Writes a byte to SPI flash’s status register. Enable Write 
Write to Status Register to Status Register command must be run prior to this 
command. 


Oc 
fwiteosabe foe 
fwiteerave foe 
fretted ion 


Enable Write to Status 50h or Enables a bit in the status register to allow an update to 
Register 06h the status register 
Program 


JEDECID 


JEDECID 


Since each serial flash device may have unique capabilities and commands, the J EDEC 
ID is the necessary mechanism for identifying the device so the uniqueness of the 
device can be comprehended by the controller (master). The J EDEC ID uses the opcode 
9Fh and a specified implementation and usage model. This J EDEC Standard 
Manufacturer and Device |D read method is defined in Standard JESD21-C, PRNO3-NV. 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


a ® 
Functional Description [ n tel 


5.23.5 


Note: 


5.23.5.1 


Table 5-60. 


5.23.5.2 


Note: 


Multiple Page Write Usage Model 


The system BIOS and Intel Active Management Technology firmware (Digital Office 
only) usage models require that the serial flash device support multiple writes to a 
page (minimum of 512 writes) without requiring a preceding erase command. BIOS 
commonly uses capabilities such as counters that are used for error logging and system 
boot progress logging. These counters are typically implemented by using byte-writes 
to ‘increment’ the bits within a page that have been designated as the counter. The 
Intel AMT firmware usage model requires the capability for multiple data updates within 
any given page. These data updates occur via byte-writes without executing a 
preceding erase to the given page. Both The BIOS and Intel AMT firmware multiple 
page write usage models applies to sequential and non-sequential data writes. 


This usage model requirement is based on any given bit only being written once from a 
‘1’ to a ‘O’without requiring the preceding erase. An erase would be required to change 
bits back to the 1 state. 


Soft Flash Protection 
There are two types of flash protection that are not defined in the flash descriptor 
supported by |ICH9: 
1. BIOS Range Write Protection 
2. SMI#-Based Global Write Protection 
Both mechanisms are logically OR’d together such that if any of the mechanisms 


indicate that the access should be blocked, then it is blocked. Table 5-60 provides a 
summary of the mechanisms. 


Flash Protection Mechanism Summary 


Reset-Override : . 
Accesses Range or SMI #- Equivalent Function on 


a dl 
Blocked Specific? Override? am 


BIOS Range 
Write Writes Yes Reset Override FWH Sector Protection 
Protection 

: ; F Same as Write Protect in 
Write Protect jwees to | SMI# Override previous ICHs for FWH 


A blocked command will appear to software to finish, except that the Blocked Access 
status bit is set in this case. 





BIOS Range Write Protection 


The ICH9 provides a method for blocking writes to specific ranges in the SPI flash when 
the Protected BIOS Ranges are enabled. This is achieved by checking the Opcode type 
information (which can be locked down by the initial Boot BIOS) and the address of the 
requested command against the base and limit fields of a Write Protected BIOS range. 


Once BIOS has locked down the Protected BIOS Range registers, this mechanism 
remains in place until the next system reset. 
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SMI # Based Global Write Protection 


The ICH provides a method for blocking writes to the SPI flash when the Write 
Protected bit is cleared (i.e., protected). This is achieved by checking the Opcode type 
information (which can be locked down by the initial Boot BIOS) of the requested 
command. 


The Write Protect and Lock Enable bits interact in the same manner for SPI BIOS as 
they do for the FWH BIOS. 


Flash Device Configurations 


The ICH9-based platform may use the serial flash in multiple configurations. The 
following table focuses on the supported configurations involving the ICH9 and Intel 
Active Management Technology (Digital Office only). 


Configuration | S¥stem BIOS Intel® 1CH9 | Minimum Number 
9 Storage Firmware of SPI Device(s) 


SPI Yes 


When SPI is selected for BIOS and a SPI device is detected by the |CH9, LPC based 
BIOS flash is disabled. 





Firmware includes Intel Active Management Technology (Digital Office only), ASF, Intel 
Quiet System Technology and Gigabit Ethernet. 


SPI Flash Device Recommended Pinout 


The table below contains the recommended serial flash device pin-out for an 8-pin 
device. Use of the recommended pin-out on an 8-pin device reduces complexities 

involved with designing the serial flash device onto a motherboard and allows for 

support of a common footprint usage model (refer to Section 5.23.8.1). 


Recommended Pinout for 8-Pin Serial Flash Device 


ee eae 
ee ce 
ee 
[Sy Vorase | 


Although an 8-pin device is preferred over a 16-pin device due to footprint 
compatibility, the following table contains the recommended serial flash device pin-out 
for a 16-pin SOIC. 
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Serial Flash Device Package 


Recommended Pinout for 16-Pin Serial Flash Device 


Hold / Reset 
Supply Voltage 


Write Protect 


Common Footprint Usage Model 


| a=) 
os 
[4 cornect [a2 [Wo ome 
a 
a 


In order to minimize platform motherboard redesign and to enable platform Bill of 
Material (BOM) selectability, many PC System OEM's design their motherboard with a 
single common footprint. This common footprint allows population of a soldered down 
device or a socket that accepts a leadless device. This enables the board manufacturer 
to support, via selection of the appropriate BOM, either of these solutions on the same 
system without requiring any board redesign. 


The common footprint usage model is desirable during system debug and by flash 
content developers since the leadless device can be easily removed and reprogrammed 
without damage to device leads. When the board and flash content is mature for high- 
volume production, both the socketed leadless solution and the soldered down leaded 
solution are available through BOM selection. 


Serial Flash Device Package Recommendations 
It is highly recommended that the common footprint usage model be supported. An 
example of how this can be accomplished is as follows: 


¢ The recommended pinout for 8-pin serial flash devices is used (refer to 
Section 5.23.7). 


¢ The 8-pin device is supported in either an 8-contact VDFPN (6x5 mm MLP) package 
or an 8-contact WSON (5x6 mm) package. These packages can fit into a socket 
that is land pattern compatible with the wide body SO8 package. 


¢ The 8-pin device is supported in the SO8 (150 mil) and in the wide-body SO8 (200 
mil) packages. 


The 16-pin device is supported in the SO16 (300 mil) package. 
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Intel® Quiet System Technology (Intel® QST) 
(Desktop Only) 


The ICH9 implements three PWM and 4 TACH signals for Intel Quiet System Technology 
(QST). 


Intel Quiet System Technology functionality requires a correctly configured system, 
including an appropriate (G)MCH with ME, ME Firmware, and system BIOS support. 


PWM Outputs 


This signal is driven as open-drain. An external pull-up resistor is integrated into the 
fan to provide the rising edge of the PWM output signal. The PWM output is driven low 
during reset, which represents 0% duty cycle to the fans. After reset de-assertion, the 
PWM output will continue to be driven low until one of the following occurs: 


¢ The internal PWM control register is programmed to a non-zero value by the Intel 
QST firmware. 


¢ The watchdog timer expires (enabled and set at 4 seconds by default). 
* The polarity of the signal is inverted by the Intel QST firmware. 


Note that if a PWM output will be programmed to inverted polarity for a particular fan, 
then the low voltage driven during reset represents 100% duty cycle to the fan. 


TACH Inputs 


This signal is driven as an open-collector or open-drain output from the fan. An 
external pull-up is expected to be implemented on the motherboard to provide the 
rising edge of the TACH input. This signal has analog hysteresis and digital filtering due 
to the potentially slow rise and fall times. This signal has a weak internal pull-up 
resistor to keep the input buffer from floating if the TACH input is not connected to a 
fan. 


Thermal Sensors 


ICH9 integrates two thermal sensors that monitor the temperature within its die. The 
thermal sensors are used for Intel® Quiet System Technology (Intel®QST). The Intel 
QST firmware can internally access the temperature measured by the sensors and use 
the data as a factor to determine how to control the fans. 


The ICH9 thermal sensors also provide the capability to protect the ICH9 under a 
catastrophic thermal situation. When the sensors are enabled and correctly 
programmed by the system BIOS, the |CH9 will shut down the system when the ICH9 
thermal limit is reached. Refer to the Thermal Memory Mapped Configuration Registers 
Section 23.2 for more info on the catastrophic settings. 
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Feature Capability Mechanism 


A set of registers is included in the |CH9 LPC Interface (Device 31, Function 0, offset 
EOh - EBh) that allows the system software or BIOS to easily determine the features 
supported by ICH9. These registers can be accessed through LPC PCI configuration 
space, thus allowing for convenient single point access mechanism for chipset feature 
detection. 


This set of registers consists of: 

Capability ID (FDCAP) 

Capability Length (FDLEN) 

Capability Version and Vendor-Specific Capability |D (FDVER) 
Feature Vector (FVECT) 


Integrated Trusted Platform Module (Mobile Only) 


The integrated TPM (TPM) implementation consists of firmware, Intel® Management 
Engine resources and dedicated hardware within the ICH and the (G)MCH. The 
integrated TPM supports all requirements of the TPM Specification Version 1.2, Level 2 
Revision 103, as published by the Trusted Computing Group. 


Integrated TPM functionality requires a correctly configured system, including an 
appropriate mobile (G)MCH with Intel Management Engine firmware, |CH9M and SPI 
Flash. 


Integrated TPM Hardware Requirements 


The following hardware components are required for TPM 1.2 functionality : 


1. SPI Flash Memory: The SPI flash component connected to the ICH (SPI interface) 
provides non-volatile storage requirement for the integrated TPM. It contains the 
FW code which is loaded by the Intel Management Engine upon power on. 


2. Monotonic Counters: The I|CH9M contains four TPM 1.2 compliant monotonic 
counters that reside in the RTC well which maintains values programmed by the 
integrated TPM across power cycles. The counters are only incremented by TPM 
software (host or ME) and are not controlled by the ICH hardware. 


3. Physical Presence: Physical presence indication is required in order to enable 
certain TPM commands. These commands are generally used to bypass owner 
authorized commands when the authorization data is unavailable or to set the 
integrated TPM to a non-owner state. The Management Engine Firmware uses the 
CLGPIO5 pin on the ICH9M to indicate Physical Presence to the platform when 
pulled high. In addition, Physical Presence flags can be set to force Physical 
Presence by firmware. 


4. Chipset: An |CH9M and (G)MCH with Intel Management Engine enabled is required 
for integrated TPM support. 


Enabling integrated TPM 


The integrated TPM is enabled based on the combination of a functional strap on both 
the ICH and the MCH and a soft strap bit found in the SPI Descriptor. When the 
integrated TPM is enabled, Front Side Bus cycles that would otherwise propagate to the 
LPC bus will be routed by the Config Bus Decoder to the integrated TPM Host Decoder. 
Either Functional strap or the soft strap bit may be used to disable the integrated TPM. 


¢ ICH Functional Strap: The |CH9M enables Integrated TPM when SPI_MOSI is 
sampled high on the rising edge of CLPWROK and disabled if the SPI_MOSI signal is 
sampled low. See Section 2.24.1 for details. The SPI_MOSI signal requires an 
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Functional Description 


external pull-up resistor to enable the integrated TPM. SPI_MOSI has an integrated 
pull-down resistor enabled at reset only and does not require an external pull-down 
resistor to disable integrated TPM. 


Soft Strap: The integrated TPM Disable bit (bit 2) in the MCHSTRPO register 
(FSMBA + Oh) within the flash descriptor can act as an override to the functional 
straps on both the ICH and MCH. When set, the integrated TPM will be disabled 
regardless of the values of the functional straps on the ICH and/or MCH. This bit 
along with both functional straps must be appropriately configured to enable 
integrated TPM. 


(G)MCH Functional Strap: For (G)MCH functional strap information, consult the 
appropriate MCH EDS. 


§§ 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


siateatis intel 


6 Ballout Definition 


This chapter contains the Intel® 1CH9 ballout information. 


6.1 Intel® |CH9 Ballout (Desktop Only) 


This section contains the |CH9 ballout. Figure 6-1 and Figure 6-2 show the ballout from 
a top of the package view. Table 6-1 is the BGA ball list, sorted alphabetically by signal 
name. 
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Figure 6-1. Intel® 1CH9 Ballout (Top view- Left Side) (Desktop Only) 
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Figure 6-2. Intel® 1CH9 Ballout (Top view- Right Side) (Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® |CH9 
Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® 1CH9 Table 6-1. Intel® |CH9 Table 6-1. Intel® 1CH9 
Ballout by Signal Name Ballout by Signal Name Ballout by Signal Name 
(Desktop Only) (Desktop Only) (Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 


Ball Name Ball # 
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Table 6-1. Intel® |CH9 
Ballout by Signal Name 
(Desktop Only) 


Ball Name Ball # 
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Table 6-1. Intel® 1CH9 Table 6-1. Intel® |CH9 Table 6-1. Intel® 1CH9 
Ballout by Signal Name Ballout by Signal Name Ballout by Signal Name 
(Desktop Only) (Desktop Only) (Desktop Only) 


Ball Name Ball Name 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 


Ball Name Ball # 
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Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 
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Table 6-1. Intel® 1CH9 
Ballout by Signal Name 
(Desktop Only) 


Ball Name Ball # 
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Table 6-1. Intel® |CH9 
Ballout by Signal Name 
(Desktop Only) 
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Ballout by Signal Name 
(Desktop Only) 
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6.2 Intel® 828011BM ICH9M and 828011EM I CH9M-E 
Ballout (Mobile Only) 


This section contains the 828011BM ICH9M and 828011EM |CH9M-E ballout. Figure 6-3 
and Figure 6-4 show the ballout from the top of the package view. Table 6-2 is the BGA 
ball list, sorted alphabetically by signal name. 
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Figure 6-3. Intel® 1CH9M and ICH9M-E Ballout (Top View- Left Side) (Mobile Only) 
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Intel® 1CH9M and I CH9M-E Ballout (Top View- Right Side) (Mobile Only) 
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Table 6-2. Intel® 1CH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 
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Table 6-2. Intel® |CH9M_ ‘Table 6-2. Intel® ICH9M 
and ICH9M-E Ballout by and1ICH9M-E Ballout by 
Signal Name (Mobile Signal Name (Mobile 
Only) Only) 
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Table 6-2. Intel® 1ICH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 
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Table 6-2. Intel® |CH9M 
and | CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 
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Table 6-2. Intel® 1ICH9M 
and ICH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 
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Table 6-2. Intel® 1ICH9M Table 6-2.Intel©1CH9M Table 6-2. Intel® |CH9M 
and ICH9M-E Ballout by andICH9M-E Ballout by and1ICH9M-E Ballout by 
Signal Name (Mobile Signal Name (Mobile Signal Name (Mobile 
Only) Only) Only) 
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Table 6-2. Intel® 1ICH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 
Vccl_5_B 
Vccl_5_B 
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Table 6-2. Intel® 1CH9M 
and | CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 
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Ballout Definition 


Table 6-2. Intel® 1ICH9M 
and ICH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name 


VccSus3_3 
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Table 6-2. Intel® 1CH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name Ball # 


AD13 
AD14 
AD17 
AD18 
AD21 
AD23 
AD28 
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Table 6-2. Intel® 1CH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name Ball # 
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Table 6-2. Intel® |CH9M 
and |CH9M-E Ballout by 
Signal Name (Mobile 
Only) 


Ball Name Ball # 
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Table 6-2. Intel® ICH9M_ Table 6-2. Intel® ICH9M 
and ICH9M-E Ballout by and1ICH9M-E Ballout by 
Signal Name (Mobile Signal Name (Mobile 
Only) Only) 


Ball Name Ball Name Ball # 


U14 
U15 
U16 
U17 


oO 





280 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


Ballout Definition intel) 


6.3 Intel® |CH9M-SFF Ballout (Mobile Only) 


This section contains the |CH9 Mobile Small Form Factor (1CH9M-SFF) ballout. 
Figure 6-5 and Figure 6-6 show the ballout from the top of the package view. Table 6-3 
is BGA ball list, sorted alphabetically by signal name. 


Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 281 


] ® 
| Nn te Ballout Definition 


Figure 6-5. Intel® 1CH9M SFF Preliminary Ballout(Top view- Left Side) 







1 2 3 5 6 7 8 9 10 11 12 13 
A TRDY# LAN_TXD2 
7 
D 


, 
- [oe [re iL 
: 
: 
« (ae 
. 
Q# / GP35 GP32 
! 
S 


[| VccSus3_3 | VccSus3_3 
[a 
| | Vec1_05 Vcc1_05 Vec1_05 
| | VccSus3_3 | VccSus3_3 VSS VSS 
[| VecSus3_3 | VccSus3_3 

Pp OC4# / Oc5# / OC8# / OCO# / OC3# / 

GPIO43 GPIO29 GPIO44 GPIO59 GPIO42 

OC10# / 
SUS_STAT# 

: alta [epee LS 


USBP8N USBP8P VSS USBP11N USBP11P Vcc1_5_A Vcec1_5_A Vcc1_5_A 
Vv 


VccSus3_3 | VccSus3_3 VSS 


VSS vss 


VccSus1_05 VSS Vccl_5_A 


Vv ‘SS 

Ww ‘SS 

Y USBP6N USBP6P VSS USBP9P USBPON [| 

AA VSS USBP5P USBP5N HDA_SDIN3 VSS HDA_RST# SATASTXP vss 
‘SS 
S 
9 





GPIO34 / 
AB | USBP4P USBP4N vs USBP3P CLK48 | HDA_SDINO] HDA_SYNC So ee ws SATASTXN SATA4TXN 
_RST# 


AC USBP2N USBP2P vss USBP3N |HDA_SDIN2}HDA_SDOUT| GPIO20 SATALED# SATASRXN VSS SATA1RXP | AC 


Ss 
s s 
GPIO33 / 
USBPOP vs USBP1N USBP1P_ | USBRBIASN vss VccHDA | HDA_DOCK vs SATARBIAS#| SATASRXP | SATA4RXN | SATAIRXN | AD 
_EN# 
ais ee - TY ss | iia rs mies 
1 3 4 6 10 11 12 13 





AE 





S 
2 


282 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


Ballout Definition 


= 
| 
@ 


Figure 6-6. Intel® 1CH9M-SFF ee rere view- io Side) 
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Table 6-3. Intel® Table 6-3. Intel® 
1CH9M-SFF Ballout by 1CH9M-SFF Ballout by 
Signal Name - (Mobile Signal Name - (Mobile 
Only) Only) 
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Table 6-3. Intel® 
1CH9M-SFF Ballout by 
Signal Name - (Mobile 
Only) 
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Table 6-3. Intel® 
1CH9M-SFF Ballout by 
Signal Name - (Mobile 
Only) 
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7 Package Information 


7.1 Intel® |CH9 Package (Desktop Only) 
The ICH9 package information is shown in Figure 7-1, Figure 7-2, and Figure 7-3. 


Note: All dimensions, unless otherwise specified, are in millimeters 


Figure 7-1. Intel® 1CH9 Package (Top View) 
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Figure 7-2. Intel® 1CH9 Package (Bottom View) 
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7.2 Intel® |CH9 Mobile Package (Mobile Only) 
7.2.1. Intel® 828011BM ICH9M and 828011 EM I CH9M-E Package 


The ICH9M package information is shown in Figure 7-4, Figure 7-5, and Figure 7-6. 


Note: All dimensions unless otherwise specified are in millimeters 


Figure 7-4. Intel® 1CH9M Package (Top View) 
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Figure 7-5. Intel® 1CH9M Package (Bottom View) 
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Intel® |CH9M-SSF Package 


7.2.2 


Figure 7-7. Intel® |1CH9M-SSF Package Drawing 
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8 Electrical Characteristics 


This chapter contains the DC and AC characteristics for the |CH9. AC timing diagrams 
are included 


8.1 Thermal Specifications 


Refer to the Intel® 1/O Controller Hub (ICH9) Thermal Design Guidelines document for 
ICH9 thermal information. 


8.2 Absolute Maximum Ratings 


Table 8-1. Intel® 1CH9 Absolute Maximum Ratings 


8.3 DC Characteristics 





Table 8-2. DC Current Characteristics! (Desktop Only) 


Power Plane Maximum Power Consumption 
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ee oe 
ener [ema | WAYS 
ae ec ec oe 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 295 


] ® 
| Nn tel Electrical Characteristics 


Table 8-2. DC Current Characteristics! (Desktop Only) 


Power Plane Maximum Power Consumption 


Powered by 
Powered by Powered by ; 
2,5 
yet? Vcc1_05 in SO | VccLAN3_3 in S3 aig not 
2 Powered by Powered by Powered by 
weecEl vecl_5 Ain SO | VccCL3_3inS3 | VccCL3_3 in $4/S5 ie 
Powered by Powered by Powered by 
2 
vecchn Vec1_05inSO | VccCL3_3 in S3 | VccCL3_3 in $4/S5 me 
/A 
/A 
/A 
/A 


Powered by Powered by Powered by 
2 
vecausn =? Vccl_5_A in SO | VccSus3_3 in S3 | VccSus3_3 in S4/S5 - 


2 Powered by Powered by Powered by 
MeESU st 2 Vcc1_05 in SO | VccSus3_3 in $3 | VccSus3_3 in S4/S5 





NOTES: 

1: These are estimated DC current numbers. 

2: Internal voltage regulators power these wells inside the Intel® 1CH9 and current for these 
rails are accounted for in the sourcing voltage rail current requirements. 

3. Only the G3 state of this rail is shown to provide an estimate of battery life. 

4. Icc (RTC) data is taken with VccRTC at 3.0 V while the system is in a mechanical off (G3) 


state at room temperature. 

The current for this rail in S3 and S4/S5 is based on the integrated LAN running at 10/100. 
The current for this rail was measured with VccHDA and VccSusHDA set to 3.3 V. 

The current for this rail was measured with VccDMI set to 1.5 V. 


oo 
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Table 8-3. Preliminary DC Current Characteristics (Mobile Only)? 


Power Plane Maximum Power Consumption 


VccLAN3_ Veclana3® | 


a by em by ema —_ | by 
2,5 
ven Vec1_05 in SO | VccLAN3_3 in $3 | VccLAN3_ 3 in sss] 


VecCL3_ |VccCL3_3 | | gma mA | 73mA mA | 73mA mA 


2 Powered = = by ma by 
VecCL1_5 vecl_5 Ain SO | VccCL3_3inS3 | VccCL3_3 in $4/S5 me 


2 Powered by Powered by Powered by 
weetlt 05 Vec1_05 inSO | VccCL3_ ae in$3_ | VccCL3_3 in ee 
vec1_5_A 1.342 A 


Vccl_ fVecl 5B B | 646 mA mA 


a 
Vecl_ fVccl_05 1” | 1.634A A 

root [it [iain fan] ee 
veReT [wR WR wm 
pea? [ae ak [we 





1; These are preliminary DC current numbers and are subject to change. 

2. Internal voltage regulators power these wells inside the Intel® |CH9 and current for this 
rail is accounted for in the sourcing voltage rail current requirements. 

3. Only the G3 state of this rail is shown to provide an estimate of battery life. 

4. Icc (RTC) data is taken with VccRTC at 3.0 V while the system is in a mechanical off (G3) 


state at room temperature. 

The current for this rail in S3 and S4/S5 is based on the integrated LAN running at 10/100. 
The current for this rail was measured with VccHDA and VccSusHDA set to 1.5 V. 

The current for this rail was measured with VccDMI set to 1.25 V. 
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Table 8-4. DC Characteristic Input Signal Association (Sheet 1 of 2) 


Associated Signals 


PCI Signals: AD[31:0], C/BE[3:0]#, DEVSEL#, FRAME#, IRDY#, PAR, 
Vini/ Vivi PERR#, PLOCK#, REQ[3:0]#, SERR#, STOP#, TRDY# 


Interrupt Signals: PIRQ[D:A]#, PIRQ[H:E]# 
GPIO Signals: GPIO[54, 52, 50, 5:2] 


Gigabit LAN Connect Signals: GLAN_RX[p,n] 


Clock Signals: CLK48 
Power Management Signals: MCH_SYNC#, THRM#, VRMPWRGD, 
LAN_RST#, CLPWROK 
Mobile Only: CLKRUN# 
SATA Signals: SATAGP[5:4, 1:0] 
Desktop Only: SATAGP[3:2] 
Vas Via Interrupt Signals: SERIRQ 
Processor Signals: RCIN#, A2Z0GATE 
USB Signals: OC[11:0]# 
GPIO Signals: GPIO[59, 55, 53, 51, 49:36, 35, 31:29, 22:16, 7:6, 1, 0], 
Desktop Only: GPIO32 
Intel® Quiet System Technology Signals: TACH[3:0] 
Strap Signals: GNT[3:0]#,SPKR, SATALED# (Strap purposes only) 


(5V Tolerant) 


Clock Signals: CLK14, PCICLK 
LPC/ Firmware Hub Signals: LAD[3:0]/FWH[3:0], LDRQ0#, LDRQ1# 
PCI Signals: PME# 
Vinal Viva SPI Signals: SPI_ MISO 
GPIO Signals: GPIO[33, 23] 
Strap Signals: SPI|_MOSI, GNTO# (Strap purposes only) 


SMBus Signals: SMBCLK, SMBDATA, SMBALERT# 

System Management Signals: SMLINK[1:0], LINKALERT#, 
Vins/Vits CLGPI04 (Digital Office Only) 

GPIO Signals: GPIO[60, 11] 


LAN Signals: GLAN_CLK, LAN_RXD[2:0] 
SATA Signals: SATA[3: 0]RX[P,N], 
Intel® High Definition Audio Signals: HDA_SDIN[3:0] 


Strap Signals: HDA_SDOUT, HDA_SYNC (Strap purposes only) 
Vinii/Viti1 GPIO Signals: GPIO34 


NOTE: See Vit_HDA/ViH_HDA for High Definition Audio Low Voltage Mode 


Vini2/Vita2! | Clock Signals: DMI_CLKN, DMI_CLKP, SATA_CLKN, SATA_CLKP 
Vcross(abs) 
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Table 8-4. DC Characteristic Input Signal Association (Sheet 2 of 2) 


Symbol Associated Signals 


Power Management Signals: PWRBTN#, RI#, SYS_RESET#, WAKE# 
Mobile Only: BATLOW# 
GPIO Signals: GPIO[60, 57:56, 28:26, 24, 14:12, 10:8], 

VinaiViias Desktop Only: GPIO[25, 15] 
System Management Signals: 
Desktop Only: CLGPIO1, CLGPIO2, CLGPIO4 (Digital Office Only) 
Mobile Only: AC_PRESENT 
Power Management Signals: PWROK, RSMRST# 

Vinal Vitia System Management Signals: |NTRUDER# 
Miscellaneous Signals: |NTVRMEN, LAN100_SLP, RTCRST#, SRTCRST# 
Controller Link: CL_CLKO, CL_DATAO 

Vit_cu/Vit_cL | Mobile Only: CL_CLK1, CL_DATA1 


GPIO Signals: GPIO58 (Desktop Only) 
Vin_ci2/Vit_cl2_| System Management Signals: CLGPIO6 (Digital Office Only 
Voi/ Vem/ Vse : 
B nals: USBP[11: P,N] (Low- d and Full-s d 
(5V Tolerant) USB Signals: USBP[11:0][P,N] (Low-speed a ull-speed) 
IV / 


Vussa HSDSC 


Vusco USB Signals: USBP[11:0][P,N] (in High-speed Mode) 


(5V Tolerant) 


Intel® High Definition Audio Signals: HDA_SDIN[3:0] 


Strap Signals: HDA_SDOUT, HDA_SYNC (Strap purposes only) 
Vin_Hpa/ ViL_HDA 


NOTE: Only applies when running in Low Voltage Mode (1.5 V) 


Intel® Quiet System Technology Signals: 
Vit_sst/ViL_sst | Desktop Only: SST 

Intel® Quiet System Technology Signals: 
Vin_peci/Vit_Peci | Desktop Only: PECI 





NOTES: 

1. Vp, = | USBPx[P] - USBPx[N] 

2. Includes VDI range 

3. Applies to Low-Speed/High-Speed USB 

4. PCI Express mVdiff p-p = 2*|PETp[x] - PETn[x]| 

5. GLAN mVdiff p-p = 2* |GLAN_RXp — GLAN_RXn| 

6. SATA Vdiff, RX (VIMAX10/MIN10) is measured at the SATA connector on the receiver side (generally, 
the motherboard connector), where SATA mVdiff p-p = 2*|SATA[x]RXP — SATA[x]RXN| 

7. VccRTC is the voltage applied to the VccRTC well of the ICH9. When the system is in a G3 state, this is 
generally supplied by the coin cell battery, but for S5 and greater, this is generally VccSus3_3. 

8. CL_Vref = 0.27 (VccCL1_5). CL_VREFO applies to Desktop configurations. CL_VREF1 applies to 
Mobile configurations. 

9. Applies to Ultra DMA Modes greater than Ultra DMA Mode 4. 

10. This is an AC Characteristic that represents transient values for these signals. 


11. Applies to Hogh-Speed USB 2.0. 
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Table 8-5. DC Input Characteristics (Sheet 1 of 2) 


set [ewer [meme [ome [oe 
Input High Voltage 0.5(3.3 V) V5REF + 0.5 Note 12 


=< Input High Voltage 0.73(V_CPU_10) | V_CPU_IO + 0.5 a 


en ee pe i 
upaniioh Yate: ee ee re 


Minimum Input Voltage - 1.5 Gb/s mVdiff 
VimINio- Genti_ | internal SATA 320 p-p 
Maximum Input Voltage - 1.5 Gb/s mVdiff 
Vimaxto-Genti | internal SATA p-p 
Minimum Input Voltage - 1.5 Gb/s mVdiff 
Viminio-Genim | esata 240 o-p 
Maximum Input Voltage - 1.5 Gb/s mVdiff 
Vimaxio-Gentm | esata p-p 
Minimum Input Voltage - 3.0 Gb/s mVdiff 
VimIN10-Gen2i_| internal SATA 219 p-p 
Maximum Input Voltage - 3.0 Gb/s mVdiff 
Vimax1o-Gen2i | internal SATA ion p-p 
Minimum Input Voltage - 3.0 Gb/s mVdiff 
Viminio-Gen2m | esata 240 o-p 


Pana 
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Table 8-5. DC Input Characteristics (Sheet 2 of 2) 


Maximum Input Voltage - 3.0 Gb/s 
Vimax10-Gen2m | eSATA 


Input Low Voltage —0.5 0.35(3.3 V 


= 
p-p 
Vv 
Vv 
Vv 
Vv 
Vv 
Vv 


Note 12 
Note 12 


Input High Voltage 0.65(3.3 V) 3.3V+0.5 


Input High Voltage 0.660 0.850 


am 
= 
A 
al 
al 


Te 
a 
Vit_cL Input Low Voltage Vv Note 8 
Oe A 
[Vince [wostrinvoings [assis [vests sos |v 
[evens [Motte GessrgPom [oso 
I 
[Yen [Perea common ese range [08 [es wie 
[Vee [Site nace Recvertwestoe [oe [20s 

525 
-50 


ae he 

HS Disconnect Detection 
p80 . 
) 


(3.3 V) 





HS Data Signaling Common Mode Note 11 
Voltage Range 


15 

62 
Vuscm 50 
( 


[vox _[rpmranvorese [wate [ST 
vicar [ommtowveneee 
Tivser_[rommanveme [veers 
Tinrecr [emecowveneae Ys POSNER VT 
[creer [mae anvotoge [eraser] Wemeow os | VP 


< 


<|< 














NOTES: 

if Vp, = | USBPx[P] - USBPx[N] 

2. Includes VDI range 

3. Applies to Low-Speed/Full-Speed USB 

4. PCI Express mVdiff p-p = 2*|PETp[x] - PETn[x]| 

5. GLAN mVdiff p-p = 2* |GLAN_RXp - GLAN_RXn| 

6. SATA Vdiff, RX (VIMAX10/MIN10) is measured at the SATA connector on the receiver side 


(generally, the motherboard connector), where SATA mVdiff p-p = 2*|SATA[x]RXP - 
SATA[X]RXN| 
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7. VccRTC is the voltage applied to the VccRTC well of the |CH9. When the system is in a G3 
state, this is generally supplied by the coin cell battery, but for S5 and greater, this is 
generally VccSus3_ 3. 


8. CL_Vref = 0.27 (VccCL1_5). CL_VREFO applies to Desktop configurations. C__VREF1 applies to 
Mobile configurations. 

9. Applies to Ultra DMA Modes greater than Ultra DMA Mode 4 

10. This is an AC Characteristic that represents transient values for these signals 

11. Applies to Hogh-Speed USB 2.0. 

12. 3.3 V refers to VccSus3_3 for signals in the suspend well and to Vcc3_3 for signals in the 


core well. See Table 3-2 and Table 3-3 for signal and power well association. 


Table 8-6. DC Characteristic Output Signal Association (Sheet 1 of 2) 


Symbol Associated Signals 


Processor Signals: A20M#, |GNNE#, INIT#, INTR, NMI, SMI#, STPCLK#, 
CPUPWRGD 
VeualMeia Mobile Only: DPSLP# 
Power Management Signals: 
Mobile Only: DPRSTP# 
PCI Signals: AD[31:0], C/BE[3:0]#, DEVSEL#, FRAME#, IRDY#, PAR, 
PERR#, PLOCK#, SERR#'1), STOP#, TRDY# 
Intel® High Definition Audio Signals: HDA_RST#, HDA_SDOUT, 
Vou2/Voi2 HDA_SYNC, HDA_BIT_CLK Zs 7 
NOTE: See Voy ypa/VoLt upa for High Definition Audio Low Voltage Mode 
GPIO Signals: GPI033 — 


SMBus Signals: SMBCLK "), SMBDATA “4 
ViuslWois System Management Signals: SMLINK[1:0]'?), LINKALERT# 
GPIO Signals: GP!O[60, 11] 


Power Management Signals: SLP_S3#, SLP_S4#, SLP_S5#, SLP_M#, 
SUSCLK, SUS_STAT#/LPCPD#, CK_PWRGD, S4_STATE# 


Mobile Only: DPRSLPVR, CLKRUN#, PMSYNC# 

SATA Signals: SATACLKREQ#, SATALED#, SLOAD, SDATAOUT[1: 0] 
Vona/Voia GPIO Signals: GPIO[49:48, 39:35, 32:31, 26, 21:18, 16, 7:6, 0], 

Desktop Only: GPIO32 

Intel® High Definition Audio Signals: HDA_DOCK_EN# (Mobile Only) 


Other Signals: SPKR 
Interrupt Signals: SERIRQ 


USB Signals: USBP[11:0][P,N] in Low-speed and Full-speed Modes 
PCI Express* Data TX Signals: PET[p,n][6:1] 


3 a SATA Signals: SATA[5:4, 1:0]TX[P.N], 
OMIN7! NOMAX7 | Desktop Only: SATA[3: 2]TX[P,N] 
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Table 8-6. DC Characteristic Output Signal Association (Sheet 2 of 2) 


Symbol Associated Signals 


LPC/ Firmware Hub Signals: LAD[3:0]/FWH[3:0], LFRAME#/FWH[4], 
Desktop Only: INIT3_3V# 
Power Management Signal: PLTRST# 
PCI Signals: PCIRST#, GNT[3:0]#, PME#')) 
Interrupt Signals: PIRQ[D:A], PIRQ[H:E]#')) 
Vous/Vois GPIO Signals: GPIO[58, 55:50, 34, 23:22, 17, 5:2, 1] 
SATA Signals: SCLOCK 
System Management Signals: CLGPIO6 (Digital Office Only) 
Intel® High Definition Audio Signals: HDA_DOCK_RST# (Mobile Only) 
SPI Signals: SPI_CSO#, SPI_MOSI, SPI_CLK 
LAN Signals: LAN_RSTSYNC, LAN_TXD[2:0] 


Power Management Signals: STP_CPU#, STP_PCI# 

GPIO Signals: GPIO[60, 59, 57:56, 47:40, 31:27, 24, 15:12, 10:8], 

Desktop Only: GPIO[25, 15] 

System Management Signals: LINKALERT#, WOL_EN, MEM_LED 
Vono/Voi9 Digital Office Only (Desktop): CLGPIO1, CLGPIO2, CLGPIO04, CLGPIO5 

Mobile Only: SUS_PWR_ACK 

Gigabit LAN Signals: LAN_PHY_PWR_CTRL 

Controller Link Signals: 

Mobile Only: CL_RST1# 


Gigabit Lan Connect Signals: GLAN_TX[p,n] 


Vusol 
VHSOH 
VuSOL USB Signals: USBP[11:0][P:N] in High-speed Mode 
VcHIRP] 
VCHIRPK 
Intel® High Definition Audio Signals: HDA_RST#, HDA_SDOUT, 


HDA_SYNC 
Vou_Hpa/VoL_HDA 


NOTE: Only applies when running in Low Voltage Mode (1.5 V) 


® Oui 5 
Vou pwe/ Intel” Quiet System ee PWM: 
Vot_pwM Desktop Only: PWM[2:0] 


Link Controller Signals: CL_CLKO, CL_DATAO 
Vor_cti/Vot_ct1 | Mobile Only: CL_CLK1, CL_DATA1 


Link Controller Signals: CL_RSTO# 


SPI Signals: SPI_CS1# 
GPIO Signals: GPIO58 (Desktop Only) 
System Management Signals: CLGPI0O6 (Digital Office Only) 


SST signal: 
Vor_sst/Vot_sst Desktop Only: SST 
Vou. peci/ PECI signal: 
VoL PEcI Desktop Only: PECI 
NOTE: 
1. These signals are open drain. 


Vox_ci3/VoL_cL3 
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Table 8-7. DC Output Characteristics (Sheet 1 of 2) 


Output Low Voltage f= 
Output High Voltage V_CPU_IO - 0.3 


Output Low Voltage aa 
Output High Voltage 


Output Low Voltage 


Output High Voltage 3.3V-0.5 


Output Low Voltage Coed 
Output High Voltage 3.3V-0.5 


Output Low Voltage [=o] 
Output High Voltage 3.3V- 0.5 


Minimum Output Voltage 
Maximum Output Voltage 


OMIN7-Genli,m Minimum Output Voltage 
OMAX7-Gen1i,m Maximum Output Voltage 


OMIN7-Gen2i,m Minimum Output Voltage } 400 


3mA Note 4 


-3 mA 


1(3.3 V) Note 7 


1.5 mA 


-0.5 mA Note 7 


4 mA 


6 mA 


-2 mA Note 7 


V 
Vv 
Vv 
V 
Vv 
V 
Vv 
V 


5 mA 


-2 mA Note 7 


mvVdif Note 2 


—h 
? 
5 


Note 2 


mVdif 
fp-p 
mVdif 
fp-p 
mVdif 
fp-p 

1.5 mA 


6 mA 
mVdif 
fp-p 


Note 3 


=k 
? 
5 


Note 3 


Note 3 


<5 
? 
5 


Note 3 


OMAX7-Gen2i,m Maximum Output Voltage 


Output Low Voltage 


Output High Voltage 


Output Low Voltage 
Output High Voltage 3.3V-0.5 


Vomin10 Minimum Output Voltage 
ae “en —— es = 


VcHIRP} 


1(3.3 V) Note 7 


Note 1 
Note 7 


-0.5 mA Note 7 


Note 6 


Note 6 





N 
3 
> 


—h 
? 
5 
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Table 8-7. DC Output Characteristics (Sheet 2 of 2) 


Output Low Voltage 
.9( 


Output Low Voltage = 
SS ae a 
Se 


) 

Output Low Voltage 

Output High Voltage 0.485(VccCL1_5) 
) 


Output High Voltage 0.9(VccCL1_5 


Li 

L1 
SR 
E a 
: a 
Vanes [ower vrone [aces | 
a) 





eee en 
ee ee eee Ce) 


NOTES: 

ils The SERR#, PIRQ[H:A], SMBDATA, SMBCLK, LINKALERT#, SMLINK[1:0], and PWM[2:0] 
signal has an open drain driver and SATALED# has an open collector driver, and the VOH 
spec does not apply. This signal must have external pull up resistor. 





2. PCI Express mVdiff p-p = 2*|PETp[x] - PETn[x]| 

3. SATA Vdiff, tx (Vomin7/Vomax7) is measured at the SATA connector on the transmit side 
(generally, the motherboard connector), where SATA mVdiff p-p = 2*|SATA[x]TXP - 
SATAL[X]TXN| 

4. Maximum lol for CPUPWRGD is 12mA for short durations (<500 mS per 1.5 s) and 9 mA 
for long durations. 

5. For INIT3_3V only, for low current devices, the following applies: VOL5 Max is 0.15 V at an 
IOL5 of 2 mA. 

6. GLAN mVdiff p-p = 2*|GLAN_TXp - GLAN_TXn| 

7. 3.3 V refers to VccSus3_3 for signals in the suspend well and to Vcc3_3 for signals in the 


core well. See Table 3-2 and Table 3-3 for signal and power well association. 
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Table 8-8. Other DC Characteristics (Sheet 1 of 2) 


vecl_5._A, 

Vcc1_5_B, 

VccUSBPLL, ‘ 

VecSATAPLL, Internal Logic and I/O Buffer Voltage 1.425 
VccDMI PLL 

VccGLANPLL 


V5REF_Sus Suspend Well Reference Voltage 4.75 
VccSus3_3 Suspend Well 1/O Buffer Voltage 3.135 
Vcc1_05 Internal Logic Voltage 0.998 


VccHDA High Definition Audio Controller Core 3.135 
Voltage 
VccHDA (low High Definition Audio Controller Low 1.425 
voltage 1.5 V) | Voltage Mode Core Voltage 
Vcc_DMI 
(Mobile Only) DMI Buffer Voltage 0.998 
Vcc_DMI 
(Desktop Only) DMI Buffer Voltage 1.188 
Vcc_DMI 
(ESI Mode Only) DMI Buffer Voltage 1.425 


VccLAN3_ 3 LAN Controller |/O Buffer Voltage 3.135 


VecGLAN1_5 Gigabit Lan Transmitter and Receiver 1.425 
Voltage 

VccGLAN3. 3 Gigabit Lan Internal Logic and I/O 3.135 
Buffer Voltage 


VccCL3_3 Controller Link Buffer Voltage 3.135 
VccRTC (G3-S0) | Battery Voltage 


VecSusHDA High Definition Audio Controller 3.135 
Suspend Voltage 
VccSusHDA ( High Definition Audio Controller Low 1.425 
He i Voltage Mode Suspend Voltage 


<a Differential Input Sensitivity 


Differential Common Mode Range 
To Output Signal Crossover Voltage 
| SE Single Ended Revr Threshold 


ILI1 ATA Input Leakage Current -200 
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Table 8-8. Other DC Characteristics (Sheet 2 of 2) 
Symbol Parameter 
PCI_3V Hi-Z State Data Line Leakage 


Max VIN =2.7 
ILI3 PCI_5V Hi-Z State Data Line Leakage V Min VIN = 
0.5V 


IL4 Input Leakage Current - Clock signals 
ILI5 Input Leakage Current - SPI signals 


Input Capacitance - All Other 
COUT Output Capacitance 
Cijo 1/O Capacitance 





1. The I/O buffer supply voltage is measured at the ICH package pins. The tolerances shown 
in Table 9-8 are inclusive of all noise from DC up to 20 MHz. In testing, the voltage rails 
should be measured with a bandwidth limited oscilloscope that has a rolloff of 3 dB/decade 
above 20 MHz. 

2. Includes CLK14, CLK48, GLAN_CLK and PCICLK 
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8.4 AC Characteristics 


Table 8-9. Clock Timings (Sheet 1 of 2) 


es od 


PCI Clock (PCI CLK) 


a 
[2 [womtine Cid | fos [i 
A 
ftsetime —SSCid| = | 3 Pw | dT | 
fattm —SSSCid P| | 


fer 


Tene 


Rise Time 


Fall Time 


SMBus Clock (SMBCLK) 


‘sme 


t21 Fall time 


fHDA Operating Frequency 
Frequency Tolerance 


Input Jitter (refer to Clock Chip 
Specification) 


ee ees | 
[ae [Low Tine Weasuredat 0.5 veo [1875 | 22a [ms | | a 


SATA Clock (SATA_CLKP, SATA_CLKN) / DMI Clock (DMI_CLKP, DMI_CLKN) 


[86 [reed Yaar [esse 


t26a 
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Table 8-9. 


Clock Timings (Sheet 2 of 2) 


Parameter 


Suspend Clock (SUSCLK) 


fsusclk | Operating Frequency 32 


Gigabit Internet Clock (GLAN_ CLK) 


[wendk [Orertrareweny «YS eS me] eT 
Pisin [Hiontime iY | [| 
Palen [towtime Si oe | fo [i 
Pais! [Siewrae—S< | [wes | 


Intel® Quiet System Technology 


[Tran [uN Operating Fewer «Y= ao Te TT (id 





NOTES: 
1. The CLK48 expects a 40/60% duty cycle. 
2. The maximum high time (t18 Max) provide a simple ensured method for devices to detect 


bus idle conditions. 

BITCLK Rise and Fall times are measured from 10%VDD and 90% VDD. 

SUSCLK duty cycle can range from 30% minimum to 70% maximum. 

CLK14 edge rates in a system as measured from 0.8 V to 2.0 V. 

The active frequency can be 5 MHz, 50 MHz or 62.5 MHz depending on the interface speed. 
Dynamic changes of the normal operating frequency are not allowed. 

7. See CK505 Clock Synthesizer Specification for measurement procedure. 


OVO) Ge 


Table 8-10. PCI Interface Timing 


Pam | peamete[n [n 
AD[31:0] Valid Delay 2 ns 
AD[31:0] Setup Time to PCICLK Rising 7 | = | 


AD[31:0] Hold Time from PCICLK Rising 


C/BE[3:0]#, FRAME#, TRDY#, IRDY#, 
STOP#, PAR, PERR#, PLOCK#, DEVSEL# 
Valid Delay from PCICLK Rising 


C/BE[3:0]#, FRAME#, TRDY#, IRDY#, 
STOP#, PERR#, PLOCK#, DEVSEL#, 
GNT[A: B]# Float Delay from PCICLK 
Rising 


C/BE[3:0]#, FRAME#, TRDY#, IRDY#, 
STOP#, SERR#, PERR#, DEVSEL#, Setup 
Time to PCICLK Rising 


C/BE[3:0]#, FRAME#, TRDY#, IRDY#, 

ta4 STOP#, PAR, PERR#, PLOCK#, IDSEL, 
DEVSEL# Output Enable Delay from 
PCICLK Rising 
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Table 8-10. PCI Interface Timing 


ee ee 


C/BE[3:0]#, FRAME#, TRDY#, IRDY#, 
STOP#, SERR#, PERR#, DEVSEL#, 
REQ[A:B]# Hold Time from PCLKIN Rising 


| t48— | PCIRST# Low | PCIRST# Low Pulse Width = Width jf 


eros 0]# Valid POUSTE tow Puls Wein from PCICLK 
Rising 
— REQ[3:0]# Setup Time to PCICLK Rising ——— 


NOTE: 
1. Refer to note 3 of table 4-4 in Section 4.2.2.2 and note 2 of table 4-6 in Section 4.2.3.2 of 
the PCI Local Bus Specification, Revision 2.3 for measurement details. 





Table 8-11. Universal Serial Bus Timing 


es 


Full-speed Source (Note 7) 


t100 | USBPx+, USBPx- Driver Rise Time | 4 | 20 | ns | e ak 
t101 | USBPx+, USBPx- Driver Fall Time peta . a= a siz 


Source Differential Driver Jitter 
- To Next Transition ‘ 
- For Paired Transitions 


asses Pree Poof 


t104 Source Jitter for Differential 
Transition to SEO Transition 


Receiver Data J itter Tolerance 
t105 - To Next Transition rg 18.5 ns 3 8-8 
- For Paired Transitions 9 ns 
| 


EOP Width: Must accept as EOP 


t107 Width of SEO interval during 
differential transition 


Low-speed Source (Note 8) 


t108 USBPx+, USBPx - Driver Rise Time = 
CL = 350 pF 
t109 USBPx+, USBPx - Driver Fall Time CL = 50 pF 
CL = 350 pF 


Source Differential Driver Jitter 
t110 To Next Transition 
For Paired Transitions 


t111 Source SEO interval of EOP 
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Table 8-11. 


Table 8-12. 


Universal Serial Bus Timing 


[am [Parmer [win [om [une [ notes | 


Full-speed Source (Note 7) 


Receiver Data Jitter Tolerance 
t113 - To Next Transition- For Paired -152 152 
Transitions ca a 


| t114 | EOP Width: Must | EOP Width: Must accept as EOP as EOP 


t115 a of SEO interval fe 
differential transition 


NOTES: 

1. Driver output resistance under steady state drive is spec’d at 28 ohms at minimum and 
43 ohms at maximum. 

Timing difference between the differential data signals. 

Measured at crossover point of differential data signals. 

Measured at 50% swing point of data signals. 

Measured from last crossover point to 50% swing point of data line at leading edge of EOP. 
Measured from 10% to 90% of the data signal. 

Full-speed Data Rate has minimum of 11.97 Mb/s and maximum of 12.03 Mb/s. 
Low-speed Data Rate has a minimum of 1.48 Mb/s and a maximum of 1.52 Mb/s. 





Os Oo OP WN 


SATA Interface Timings 


Sy 
[or [eent Operating Oat eros [esas [eros me [|_| 


7 Gen II Operating Data Period 


paso faeetme CP em pT 


Paai [ratte —————SSSCS—~i as om Pe 
[aaa [maerntarsen | = | 2 fm | | 
aes [eomeser———SSC* WO | OH we [S| 
[as [conwarewansniamacea [amas [aoe [me [3 | 
[25 [008 operating Dat pened | suse? | weer [ve [@ | 





NOTES: 

1: 20% - 80% at transmitter 

2 80% - 20% at transmitter 

3. As measured from 100 mV differential crosspoints of last and first edges of burst. 
4 Operating data period during Out-Of-Band burst transmissions. 
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Table 8-13. SMBus Timing 
Bus Tree Time Between Stop and Start 47 
Condition 


Hold Time after (repeated) Start Condition. 
t131 | After this period, the first clock is 
generated. 
Repeated Start Condition Setup Time 
Stop Condition Setup Time 


t134 Data Hold Time 
t135 | Data Setup Time 
t136 Device Time Out 


Cumulative Clock Low Extend Time (slave 
t137 . 

device) 

Cumulative Clock Low Extend Time 
t138 : 

(master device) 


4.7 
250 
25 35 


aa 
° 





NOTES: 
1. A device will timeout when any clock low exceeds this value. 
2. t137 is the cumulative time a slave device is allowed to extend the clock cycles in one 


message from the initial start to stop. If a slave device exceeds this time, it is expected to 
release both its clock and data lines and reset itself. 


3. t138 is the cumulative time a master device is allowed to extend its clock cycles within 
each byte of a message as defined from start-to-ack, ack-to-ack or ack-to-stop. 
4. t134 has a minimum timing for 12C of 0 ns, while the minimum timing for SMBus is 300 ns. 


Table 8-14. Intel® High Definition Audio Timing 
{143 Time duration for which HDA_SDOUT is valid 
before HDA_BIT_CLK edge. 
t144 Time duration for which HDA_SDOUT is valid 
after HDA_BIT_CLK edge. 


t145 Setup time for HDA_SDIN[3:0] at rising edge 
of HDA_BIT_CLK 

t146 Hold time for HDA_SDIN[3:0] at rising edge 
of HDA_BIT_CLK 
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Table 8-15. LPC Timing 


t150 | LAD[3:0] Valid Delay from PCICLK Rising 


LAD[3:0] Output Enable Delay from PCICLK 
at Rising 


t152 | LAD[3:0] Float Delay from PCICLK Rising 


t154 | LAD[3:0] Hold Time from PCICLK Rising 
t155 | LDRQ[1:0]# Setup Time to PCICLK Rising 
t156 | LDRQ[1:0]# Hold Time from PCICLK Rising 


t157_ | LFRAME# Valid Delay from PCICLK Rising 


t153 | LAD[3:0] Setup Time to PCICLK Rising 





Table 8-16. Miscellaneous Timings 


SERIRQ Setup Time to PCICLK Rising 
SERIRQ Hold Time from PCICLK Rising 


t162 RI#, EXTSMI#, GPIO, USB Resume Pulse 
Width 


t163 | SPKR Valid Delay from OSC Rising 
t164 | SERR# Active to NMI Active 
t165 IGNNE# Inactive from FERR# Inactive 





Table 8-17. SPI Timings (20 MHz) 


[om [Parone Tn | 
Serial Clock Frequency - 20MHz Operation 


SPI Clock Duty cycle at the host 


t183 Tco of SPI_MOSI with respect to serial 5 
clock falling edge at the host 

t184 Setup of SPI_MISO with respect to serial 16 
clock falling edge at the host 

t185 Hold of SPI_ MISO with respect to serial 
clock falling edge at the host 

t186 Setup of SPI_CS[1:0]# assertion with 30 
respect to serial clock rising at the host 

{187 Hold of SPI_CS[1:0]# deassertion with 30 
respect to serial clock falling at the host 


NOTE: 
1. The typical clock frequency driven by the ICH9 is 17.86 MHz. 
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Table 8-18. SPI Timings (33 MHz) 


fae [rane 





t180b Serial Clock Frequency - 33MHz 32.19 
Operation 
t182b | SPI Clock Duty cycle at the host | 48% | 52% | | 
Tco of SPI_MOSI with respect to serial 
beso clock falling edge at the host 
Setup of SPI_MISO with respect to serial 
nea clock falling edge at the host poe | — | ons 
Hold of SPI_MISO with respect to serial 
Hre50 clock falling edge at the host ee | le 
t186b Setup of SPI_CS[1:0]# assertion with 30 de 
respect to serial clock rising at the host 
Hold of SPI_CS[1:0]# deassertion with 
ey) respect to serial clock falling at the host ao | = | me | 
NOTE: 
1. The typical clock frequency driven by the ICH9 is 31.25 MHz. 


Table 8-19. SST Timings 
Parameter 
tBIT Bit time (overall time evident on SST) 
Bit time driven by an originator 


Bit time jitter between adjacent bits in an 
tBIT, jitter | SST message header or data bytes after 
timing has been negotiated 


Change in bit time across a SST address 

tBIT. drift or SST message bits as driven by the 
originator. This limit only applies across 
tBIT-A bit drift and tBIT-M drift. 


tH1 High level time for logic '1' 
HO 


t 


High level time for logic '0' 0.2 


Rise time (measured from Vo, = 0.3V to 


Fall time (measured from Voy = 1.1V to 
ViL,max) 





I. The originator must drive a more restrictive time to allow for quantized sampling errors by 
a client yet still attain the minimum time less than 500 us. tBIT limits apply equally to 
tBIT-A and tBIT-M. |CH9 is targeted on 1 Mbps which is 1 us bit time. 

2. The minimum and maximum bit times are relative to tBIT defined in the Timing 
Negotiation pulse. 
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Table 8-20. PECI Timings 


Pam [paneer we | oe 


Bit time (overall time evident on 
tBIT PECI) 
Bit time driven by an originator 


Bit time jitter between adjacent bits 
. in an PECI message header or data 
eS bytes after timing has been 
negotiated 


Change in bit time across a PECI 
address or PECI message bits as 

tBIT,drift | driven by the originator. This limit 
only applies across tBIT-A bit drift 
and tBIT-M drift. 


High level time for logic '1' 


tHO High level time for logic '0' 

t Rise time (measured from VOL to 
RECIR VIH,min, Vtt(nom) -5%) 

t Fall time (measured from Voy to 
PECIF VIL,max, Vtt(nom) +5%) 


NOTES: 

1. The originator must drive a more restrictive time to allow for quantized sampling errors by 
a client yet still attain the minimum time less than 500 us. tBIT limits apply equally to 
tBIT-A and tBIT-M. ICH9 is targeted on 2 MHz which is 500 ns bit time. 





2. The minimum and maximum bit times are relative to tBIT defined in the Timing 
Negotiation pulse. 
3. Extended trace lengths may appear as additional nodes. 


Table 8-21. Power Sequencing and Reset Signal Timings (Sheet 1 of 2) 


t200 VccRTC active to RTCRST# inactive 

t201 VSREF_Sus active to VccSus3_ 3 
active 

t202 VccSus3 3 active to VccSus1_05 
active 


18 
10 


1204 VccSus supplies active to LAN_RST# 
inactive, RSMRST# inactive 








t206 VccLAN3_3 active to VccLAN1_05 
active 


t207 VccCL3_3 active to VccCL1_05 active 
t208 VccCL3_3 active to VccCL1_5 active 


VccRTC supply active to VccSus 
t203 : 
supplies active 


1205 VecSus3 3 active to VccSus1_5 
active 
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Table 8-21. Power Sequencing and Reset Signal Timings (Sheet 2 of 2) 


[sm | roomner [on [var [vos [| Fa 
ee ce 
wait [vert Sativewov.crvoace | — | —- | - | # [ea 


{213 VecSus supplies active to Vcc supplies Foo | — fom | 3 8-14 
active 


Vcc supplies active to PWROK 

Note: PWROK assertion indicates that ms 
PCICLK has been stable for at least 

lms. 


PWROK and VRMPWRGD active to 

SUS_STAT# inactive and Processor 5, 10, 
interface signals latched to strap 23 aa BRECets 12 
value 

inactive 

PLTRST# assertion to VccGLANPLL 

inactive for platforms using ICH9 

integrated GbE LAN 


aa} 


1229 HDA_RST# inactive to HDA_BIT_CLK 162.8 - 
startup delay 


NOTES: 
il V5REF must be powered up before Vcc3_3, or after Vcc3_3 within 0.7 V. Also, VSREF must 
power down after Vcc3_3, or before Vcc3_3 within 0.7 V. 





2; The associated 3.3 V and 1.05 V supplies are assumed to power up or down ‘together’. 

3: The VccSus supplies must never be active while the VccRTC supply is inactive. 

4. Vcc1_5 must power up before V_CPU_IO or after V_CPU_IO within 0.7 V, b) V_CPU_IO 
must power down before Vcc1_5 or after Vcc1_5 within 0.7 V. 

5. INIT# value determined by value of the CPU BISTEnable bit (Chipset Configuration 


Register Offset 3414h: bit 2). 
6 The associated 3.3 V and 1.05 V supplies are assumed to power up or down ‘together’. 
7. The associated 3.3 V and 1.05 V supplies are assumed to power up or down ‘together’. 
8. The associated 3.3 V and 1.5 V supplies are assumed to power up or down ‘together’. 
9. The associated 3.3 V and 1.5 V supplies are assumed to power up or down ‘together’. 
10. These transitions are clocked off the internal RTC. 1 RTC clock is approximately from 
28.992 us to 32.044 us 
11. “VccGLANPLL inactive" is defined for this timing to be when VccGLANPLL drops to 1.425 V 
or less, aS measured at the ICH9. This timing applies only to platforms using ICH9 
integrated GbE LAN. 
12. Maximum timing may be exceeded in a management engine enabled system. 
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Table 8-22. Power Management Timings (Sheet 1 of 3) 


VccSus active to SLP_S5#, SLP_S4#, 
t230 SLP_S3#, SUS_STAT#, PLTRST# and 
PCIRST#active 


t231 RSMRST# inactive to SUSCLK running, 
t232 SLP_S5# inactive 


a3 | | 233 |sirsse inactive to SLP_S4# inactive 


t234 SLP_S4# inactive to SLP_S3# inactive 
Processor I/F signals latched prior to 
t250 STPCLK# active 
(Mobile Only) 


1251 Bus Master Idle to DPSLP# active 
(Mobile Only) 

{252 DMI message to PMSYNC# assertion PCICLK 
(Mobile Only) 


: j 8-20 
{253 DPSLP# active to STP_CPU# active 1 1 PCICLK 3 8-21 
(Mobile Only) 8-22 


STP_CPU# active to processor clock 8-21 
t254 stopped PCICLK | 3, 10 6-93 
(Mobile Only) 
STP_CPU# active to DPRSTP#, DPRSLPVR 5 
t255 active | 
(Mobile Only) 
Break Event to DPRSTP#, DPRSLPVR 
inactive 8-21 
t265 : ‘ 12 
(C4 Exit) 8-22 
(Mobile Only) 
DPRSLPVR, DPRSTP# inactive to Programable. 
t266a STP_CPU# inactive and CPU Vcc ramped See D31:F0:AA, 8-21 
(Mobile Only) bits 3:2 
DPRSLPVR, DPRSTP# inactive to Programable. 
t266b | STP_CPU# inactive and CPU Vcc ramped See D31:F0:A8 8-22 
(Mobile Only) bits 2:0 
Break Event to STP_CPU# inactive 
t267 ‘| (C3 Exit) Note 14 | pcictk | *,1% | 8-20 
(Mobile Only) 
STP_CPU# inactive to processor clock a4 
t268 | running 3 PCICLK | 3,10 | 655 
(Mobile Only) 
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Table 8-22. Power Management Timings (Sheet 2 of 3) 


Cd 


STP_CPU# inactive to DPSLP# inacti 
1269 _ inactive to inactive 1 1 PCICLK 3,7 
(Mobile Only) 
DPSLP# inactive to STPCLK# inactive 
t270 ; us 
(Mobile Only) 
Break Event to STPCLK# inactive 
t273 (C2 Exit) ns 
(Mobile Only) 
STPCLK# inactive to processor I/F signals 
t274 unlatched PCI CLK 3,9 
(Mobile Only) 
Programable. 
1075 | PMSYNC# de-assert to STPCLK# de- See . 
assert. (Mobile Only) D31:F0:A8 H 
bits 5:3 
STPCLK# active to DMI Message on PCICLK 7 


t281 DMI Message to CPUSLP# active | PCICLK | | 8-16 | 16 


DMI Message to SUS_STAT# active Pre RTCCLK PEE ae 


SUS_STAT# active to PLTRST#, PCIRST# 

t284 active RTCCLK 
(Desktop Only) 
SUS_STAT# active to STP_PCI# acti 

285 active to Cl# active RTCCLK 
(Mobile Only) 


STP_PCI# active to PLTRST# and 

t286 PCIRST# active 5 7 RTCCLK 1 8-18 
(Mobile Only) 

{287 PLTRST#, PCIRST# active to SLP_S3# 1 2 RTCCLK 1 8-17 
active 8-18 


SLP_S3# active to PWROK, VRMPWRGD 

inactive ms 8-18 
(Mobile Only) 

SLP_S3# active to PWROK, VRMPWRGD 

inactive ms 8-17 
(Desktop Only) 


PWROK, VRMPWRGD inactive to Vcc ; 18 
supplies inactive (nominal voltage -5%) 20 ns 23 : 
(Mobile Only) 

1291 | SLP_S3# active to SLP_S4# active ie ee | RTCCLK Ea 
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Table 8-22. Power Management Timings (Sheet 3 of 3) 


Pam [tne oe 


PWROK, VRMPWRGD inactive to Vcc 
supplies inactive (nominal voltage -5%) 


(Desktop Only) 


t295 SLP_S4# active to SLP_S5# active 1 
t296 Wake Event to SLP_S5# inactive 1 


SLP_S5# inactive to SLP_S4# inactive See Note Below 


N 
Ww 


RTCCLK 1,5 


ee 


10 RTCCLK 1 


N 

Oo 
Hi ° i 

wn 


foe) 
B 
oO 


wu BWON|] ON] ON 


Ei 


t298 S4_STATE# inactive to SLP_S3# inactive al Note 16 | RTCCLK 1 


1299 S4 Wake Event to SLP_S4# inactive (S4 
(S 


See Note Below 


small as | etccik 
possible 


PRI NINNNRP RB] PRP] eR 


Wake) 


t300 S3 Wake Event to SLP_S3# inactive (S3 
Wake) 


© CO] © © 
PH 
cowN] ON 


t301 S1 Wake Event to STPCLK# inactive - 
t302 SLP_M# inactive to SLP_S3# inactive 


SLP_S4# inactive to SLP_M# inactive 
t303 when Intel® AMT enabled 


(Digital Office Only) 


RSMRST# deassertion to LAN RST# 
t304 = 
deassertion 


t305a LAN Power Rails active to LAN_RST# 1 
deassertion 

t305b LAN_RST# assertion to LAN power rails 20 
inactive 


t306 LANRST# assertion to PWROK assertion 


SLP_S3# active to Vcc supplies inactive 5 a 


1 
7 
17 
18 
25 
m 

8-17 

24 
8-18 


ro0F (nominal voltage -5%) 


t308a__| RSMRST# deassertion to CLPWROK 
assertion 
Controller Link Power Rails active to 

uae CLPWROK assertion 1 


t308c CLPWROK assertion to PWROK assertion | ms | 


ns 
ns 
ms 
ms 
ns 

Ss 
uS 
ms 
ms 
ms 


21 


t312 RSMRST# falling edge transition 


t313 SLP_M# active to RSMRST# active 


8- 


Hh 
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These transitions are clocked off the internal RTC. 1 RTC clock is approximately from 
28.992 us to 32.044 us. 

The ICH9 STPCLK# assertion will trigger the processor to send a stop grant acknowledge 
cycle. The timing for this cycle getting to the ICH9 is dependant on the processor and the 
memory controller. 

These transitions are clocked off the 33 MHz PCICLK. 1 PCICLK is approximately 30 ns. 
The ICH9 has no maximum timing requirement for this transition. It is up to the system 
designer to determine if the SLP_S3#, SLP_S4# and SLP_S5# signals are used to control 
the power planes. 

If the transition to S5 is due to Power Button Override, SLP_S3#, SLP_S4# and SLP_S5# 
are asserted together similar to timing t287 (PCIRST# active to SLP_S3# active). 

If there is no RTC battery in the system, so VccRTC and the VccSus supplies come up 
together, the delay from RTCRST# and RSMRST# inactive to SUSCLK toggling may be as 
much as 2.5 s. 

This value is programmable in multiples of 1024 PCI CLKs. Maximum is 8192 PCI CLKs 
(245.6 us). 

The Min/Max times depend on the programming of the “SLP_S4# Minimum Assertion 
Width” and the “SLP_S4# Assertion Stretch Enable bits (D31:F0:A4h bits 5:3)”. 

Note that this does not apply for synchronous SMIls. 

This is a clock generator specification 

If the (G)MCH does not have the CPUSLP# signal, then the minimum value can be 

16 PCICLK. 

This is non-zero to enforce the minimum assert time for DPRSLPVR. If the minimum assert 
time for DPRSLPVR has been met, then this is permitted to be 0. 

This is non-zero to enforce the minimum assert time for STP_CPU#. If the minimum assert 
time for STP_CPU# has been met, then this is permitted to be 0. 

This value should be at most a few clocks greater than the minimum. 

When AMT enabled, S4_STATE# indicates if system is in S4 state or below. (Digital Office 
Only). 

For t234 and t298, the SLP_M# stretching logic can push the Max value much larger than 
the Min (e.g., up to 3 seconds). With the installation of the Intel Manageability Engine 
firmware, the Max value of t234 and t298 is 99 ms. Without the installation of the 
firmware, the Max value is 4 RTC clocks. 

RSMRST# must de-assert at or before LAN_RST# de-assertion. 

Measured from VccLAN3_3 or VccLAN1_05 power within voltage spec (which ever is later 
in time) to LAN_RST# = (Vih+Vil)/2. It is acceptable to use an RC circuit sourced from 
VccLAN3_3 to create LAN_RST#. The rising edge of LAN_RST# needs to be a clean, 
monotonic edge for frequency content below 10 MHz. 

If Integrated LAN is supported, LAN_RST# must be de-asserted at or before PWROK 
assertion. 

If Integrated LAN is not supported, LANRST# should be tied to ground and must never de- 
assert 

RSMRST# falling edge must transition to 0.8 V or less before VccSus3_3 drops to 2.1 V 
If bit 0 of Section 13.8.1.3 is set to a 1, SLP_S5# will not be de-asserted until a wake 
event is detected. If bit 0 is set to 0, SLP_S5# will de-assert within the specification listed 
in the table. 

t290 and t294 are not applied to VS5REF. V5REF timings are bonded by power sequencing. 
t290 and t294 apply during SO to G3 transitions only. 

t307 is applicable in SO to Sx transitions. 

A power rail is considered to be inactive when the rail is at its normal voltage minus 5% or 
less. 
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8.5 Timing Diagrams 


Figure 8-1. Clock Timing 


Rise Time 





Figure 8-2. Valid Delay from Rising Clock Edge 


Valid Delay—> 





Figure 8-3. Setup and Hold Times 


Setup Ti 
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Figure 8-4. Float Delay 





Figure 8-5. Pulse Width 





Figure 8-6. Output Enable Delay 


Output 





Figure 8-7. USB Rise and Fall Times 


Rise Time Fall Time 


Differential 
Data Lines 


Low-speed: 75 ns at C, = 50 pF, 300 ns at C, = 350 pF 
Full-speed: 4 to 20 ns at C, = 50 pF 
High-speed: 0.8 to 1.2 ns at C, = 10 pF 
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Figure 8-8. USB Jitter 
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Figure 8-11. SMBus Timeout 
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Figure 8-12. SPI Timings 
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Figure 8-13. Intel® High Definition Audio Input and Output Timings 


HDA_BIT_CLK 
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V_CPU_IO 
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Vcec1_5 B 











Vec1_05 
and other 
power’ 


Vec3_3 














VSREF 








LAN_RST#, 
RSMRST# 











VecSus1_05 








VecSus3_3 








V5REF_Sus 








RTCRST# 





t200 


VecRTC 





NOTES: 

a, Other power includes VccUSBPLL, VccDMIPLL, and VccSATAPLL. All of these power signals 
must independently meet the timings shown in the figure. There are no timing 
interdependencies between Vcc1_05 and these other power signals. There are also no 
timing interdependencies for these power signals, including Vcc1_05, to Vcc3_3 and 
Vcecl1_5_A/Vcc1_5_B. 

2. PWROK must not glitch, even if RSMRST# is low. 
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Figure 8-15. G3 (Mechanical Off) to SO Timings 


Electrical Characteristics 














a G3 SS G3> S5 YK 


x SO state 
o 





DMI message 


STPCLK# 


Processor I/F 
signals 





PLTRST# 

















Strap Values 4 Normal Operation 
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| 1230 





SLP_S4# 





SLP_S5# 


























SUSCLK Running 

RSMRST# 

LAN_RST# 

VecSus1_05 

| 1202 

VccSus3_3 A 
NOTE: 
if Vcc includes Vcc1_5_A, Vcc1_5_B, Vcc3_3, Vcc1_05, VccUSBPLL, VccDMIPLL, 


VccSATAPLL, V5REF and V_CPU_IO. 
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Figure 8-16. SO to S1 to SO Timing 
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NOTE: 
I: Vcc includes Vcc1_5_A, Vcc1_5_B, Vcc3_3, Vcc1_05, VccUSBPLL, VccDMIPLL, and 
VccSATAPLL. 
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Figure 8-18. SO to S5 to SO Timings (Mobile Only) 
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NOTE: Vcc includes Vcc1_5_A, Vcc1_5_B, Vcc3_3, Vcc1_05, VccUSBPLL, VccDMIPLL, and 
VccSATAPLL. 


Figure 8-19. CO to C2 to CO Timings (Mobile Only) 
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Figure 8-20. CO to C3 to CO Timings (Mobile Only) 
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Figure 8-21. CO to C4 to CO Timings (Mobile Only) 
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Figure 8-22. CO to C5/ C6 to CO Timings (Mobile Only) 
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Figure 8-23. Sleep control signal relationship - Host boots and Management Engine off 
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NOTES: 
1. t290 is also applicable when the system transitions from SO to G3. 


330 Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


1] ® 
Electrical Characteristics [ n tel 


Figure 8-24. Sleep control signal relationship - Host and Management Engine boot after G3 
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NOTE: When both the host and Management Engine boot after G3, SLP_M# does not have any 
timing dependency on other sleep control signals. SLP_M# will be de-asserted some time 
between SLP_S5# de-assertion and SLP_S3# de-assertion. 


Figure 8-25. Sleep control signal relationship - Host stays in S5 and Management Engine 
boots after G3 
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Figure 8-26. S4, S5/ M1 to SO/ MO 
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NOTE: Vcc includes Vcc1_5_A, Vcc1_5_B, Vcc3_3, Vcc1_05, VccUSBPLL, VccDMIPLL, and 
VccSATAPLL. 


Figure 8-27. SO to G3 Timings (Desktop Only) 














Figure 8-28. SO to G3 Timings (Mobile Only) 





NOTE: Vcc includes Vcc1_5_A, Vcc1_5_B, Vcc3_3, Vcc1_05, VccUSBPLL, VccDMIPLL, and 
VccSATAPLL. 
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9 Register and Memory Mapping 


The ICH9 contains registers that are located in the processor’s I/O space and memory 
space and sets of PCI configuration registers that are located in PCI configuration 
space. This chapter describes the |CH9 I/O and memory maps at the register-set level. 
Register access is also described. Register-level address maps and Individual register 
bit descriptions are provided in the following chapters. The following notations and 
definitions are used in the register/instruction description chapters. 


RO Read Only. In some cases, if a register is read only, writes to this 
register location have no effect. However, in other cases, two 
separate registers are located at the same location where a read 
accesses one of the registers and a write accesses the other 
register. See the |/O and memory map tables for details. 


wo Write Only. In some cases, if a register is write only, reads to this 
register location have no effect. However, in other cases, two 
separate registers are located at the same location where a read 
accesses one of the registers and a write accesses the other 
register. See the |/O and memory map tables for details. 


R/ W Read/Write. A register with this attribute can be read and 
written. 
R/ WC Read/Write Clear. A register bit with this attribute can be read 


and written. However, a write of 1 clears (sets to 0) the 
corresponding bit and a write of 0 has no effect. 


R/ WO Read/Write-Once. A register bit with this attribute can be 
written only once after power up. After the first write, the bit 
becomes read only. 


R/ WLO Read/Write, Lock-Once. A register bit with this attribute can be 
written to the non-locked value multiple times, but to the locked 
value only once. After the locked value has been written, the bit 
becomes read only. 


Reserved The value of reserved bits must never be changed. For details 
see Section 9.2. 


Default When |CH9 is reset, it sets its registers to predetermined default 
states. The default state represents the minimum functionality 
feature set required to successfully bring up the system. Hence, 
it does not represent the optimal system configuration. It is the 
responsibility of the system initialization software to determine 
configuration, operating parameters, and optional system 
features that are applicable, and to program the |CH9 registers 
accordingly. 


Bold Register bits that are highlighted in bold text indicate that the 
bit is implemented in the ICH9. Register bits that are not 
implemented or are hardwired will remain in plain text. 
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9.1 PCI Devices and Functions 


The Intel |CH9 incorporates a variety of PCI devices and functions, as shown in 

Table 9-1. They are divided into seven logical devices. The first is the DMI-To-PCI 
bridge (Device 30). The second device (Device 31) contains most of the standard PCI 
functions that always existed in the PCI-to-ISA bridges (South Bridges), such as the 
Intel PIIX4. The third and fourth (Device 29 and Device 26) are the USB and USB2 host 
controller devices. The fifth (Device 28) is PCI Express device. The sixth (Device 27) is 
HD Audio controller device, and the seventh (Device 25) is the Gigabit Ethernet 
controller device. 


If for some reason, the particular system platform does not want to support any one of 
the Device Functions, with the exception of D30:FO, they can individually be disabled. 
The integrated Gigabit Ethernet controller will be disabled if no Platform LAN Connect 
component is detected (See Chapter 5.3). When a function is disabled, it does not 
appear at all to the software. A disabled function will not respond to any register reads 
or writes, insuring that these devices appear hidden to software. 


Table 9-1. PCI Devices and Functions 


NOTES: 
1. The PCI-to-LPC bridge contains registers that control LPC, Power Management, System 
Management, GPIO, Processor Interface, RTC, Interrupts, Timers, and DMA. 
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9.2 


9.3 


9.3.1 


2. The ICH9 can optionally configure the USB ports from a 6-6 configuration into a 8-4 
configuration, with 8 ports on D29:F7 EHCI and 4 ports on D26:F7 EHCI. In the 8-4 
configuration UHCI #6 will be mapped to D29:F3. In the 6-6 configuration UHCI #6 will be 
mapped to D26:F2. 

3. SATA controller 2 (D31:F5) is only visible in |CH9 desktop components and when D31:F2 
Ccc.SCC=01h. 


PCI Configuration Map 


Each PCI function on the ICH9 has a set of PCI configuration registers. The register 
address map tables for these register sets are included at the beginning of the chapter 
for the particular function. 


Configuration Space registers are accessed through configuration cycles on the PCI bus 
by the Host bridge using configuration mechanism #1 detailed in the PCI Local Bus 
Specification, Revision 2.3. 


Some of the PCI registers contain reserved bits. Software must deal correctly with 
fields that are reserved. On reads, software must use appropriate masks to extract the 
defined bits and not rely on reserved bits being any particular value. On writes, 
software must ensure that the values of reserved bit positions are preserved. That is, 
the values of reserved bit positions must first be read, merged with the new values for 
other bit positions and then written back. Note the software does not need to perform 
read, merge, write operation for the configuration address register. 


In addition to reserved bits within a register, the configuration space contains reserved 
locations. Software should not write to reserved PCI configuration locations in the 
device-specific region (above address offset 3Fh). 


1/O Map 


The I/O map is divided into Fixed and Variable address ranges. Fixed ranges cannot be 
moved, but in some cases can be disabled. Variable ranges can be moved and can also 
be disabled. 


Fixed I/ O Address Ranges 


Table 9-2 shows the Fixed I/O decode ranges from the processor perspective. Note that 
for each |/O range, there may be separate behavior for reads and writes. DMI (Direct 
Media Interface) cycles that go to target ranges that are marked as “Reserved” will not 
be decoded by the ICH9, and will be passed to PCI unless the Subtractive Decode Policy 
bit is set (D31: FO: Offset 42h, bit 0). If a PCI master targets one of the fixed I/O target 
ranges, it will be positively decoded by the ICH9 in medium speed. 


Address ranges that are not listed or marked “Reserved” are not decoded by the ICH9 
(unless assigned to one of the variable ranges). 
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Table 9-2. Fixed I/ O Ranges Decoded by Intel® I CH9 (Sheet 1 of 2) 


1/0 : 


DMA Controller, or LPC, or DMA Controller and LPC or 
oon PCI PCI 


81h-83h DMA Controller DMA Controller | = DMA 
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Table 9-2. 


Fixed I/ O Ranges Decoded by Intel® | CH9 (Sheet 2 of 2) 


1/0 ; 
Address Read Target Write Target 
84h-86h DMA Controller DMA cial and LPC or 


87h DMA Controller DMA Controller 


88h DMA Controller DMA at and LPC or | oma | 


M 
M 
M 
89h-8Bh DMA Controller DMA Controller M 
M 
M 
M 


8Ch-8Eh DMA Controller DMA eee and LPC or 


B2h-B3h Power Management Power Management 
Management 


FOh PCI and Master Abort? FERRE ENNE? (Pnberrupt Processor |/F 
Controller 

170h-177h SATA Controller or PCI SATA Controller or PCI ao » 
1FOh-1F7h SATA Controller or PCI SATA Controller or PCI oe. » 
Forwarded to 

376h SATA Controller or PCI SATA Controller or PCI SATA 
Forwarded to 

3F6h SATA Controller or PCI SATA Controller or PCI SATA 


4D0h-4D1h Interrupt Controller Interrupt Controller Interrupt 
CF9h Reset Generator Reset Generator Processor |/F 


NOTE: 
1. A read to this address will subtractively go to PCI, where it will master abort. 


DMA 
DMA 
DMA 
DMA 
DMA 
DMA 
DMA 
DMA 
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9.3.2 Variable |/ O Decode Ranges 


Table 9-3 shows the Variable |/O Decode Ranges. They are set using Base Address 
Registers (BARs) or other configuration bits in the various PCI configuration spaces. 
The PNP software (PCI or ACPI) can use their configuration mechanisms to set and 
adjust these values. 


Warning: The Variable |/O Ranges should not be set to conflict with the Fixed I/O Ranges. 
Unpredictable results if the configuration software allows conflicts to occur. The ICH9 
does not perform any checks for conflicts. 


Table 9-3. Variable |/O Decode Ranges 


Size 


[ative IBE Command [Anywherein 4KB/O Space | 8 [EU ——_—| 
[native BE Conivcl [Anywhere ns4KBVO Space | _4 _[lDEUnt =| 
[eno | Anywhere n 64K 70 Space | 64 [| GROUn | 


NOTE: 
1. Decode range size determined by D31:F0O:ADh: bits 5:4 
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Table 9-4. 


Memory Map 


Table 9-4 shows (from the processor perspective) the memory ranges that the |CH9 
decodes. Cycles that arrive from DMI that are not directed to any of the internal 
memory targets that decode directly from DMI will be driven out on PCI unless the 
Subtractive Decode Policy bit is set (D31:F0O: Offset 42h, bit 0). 


PCI cycles generated by external PCI masters will be positively decoded unless they fall 
in the PCl-to-PCIl bridge memory forwarding ranges (those addresses are reserved for 
PCI peer-to-peer traffic). If the cycle is not in the internal LAN controller’s range, it will 
be forwarded up to DMI. Software must not attempt locks to the |CH9’s memory- 
mapped I/O ranges for EHCI and HPET. If attempted, the lock is not honored which 
means potential deadlock conditions may occur. 


Memory Decode Ranges from Processor Perspective (Sheet 1 of 2) 


Memory Range Dependency/ Comments 


0000 0000h- 000D FFFFh 
0010 0000h-TOM Main Memory TOM registers in Host controller 
(Top of Memory 


) 
000E 0000h-000E FFFFh aed Firmware Hub Decode Enable register 
OOOF 0000h-000F FFFEh ee Firmware Hub Decode Enable register 
10(x) APIC inside | X is controlled via APIC Range Select (ASEL) 
FES Ceguon rn ree xtse) ICH9 field and APIC Enable (AEN) bit 
* 
FEC1 0000h-FEC1 7FFF | PCI Express* Port 1 PCI Express* Root Port 1 I/OxAPIC Enable 
(PAE) set 
* 
FEC1 8000h-FEC1 8FFFh | PCI Express* Port 2 | PC! Express® Root Port 2 1/OxAPIC Enable 
(PAE) set 
* 
FEC2 0000h-FEC2 7FFFh | PCI Express* Port 3 | PC! Express® Root Port 3 I/OxAPIC Enable 
(PAE) set 
* 
FEC2 8000h-FEC2 8FFFh | PCI Express* Port 4 | PC! Express® Root Port 4 I/OxAPIC Enable 
(PAE) set 
* 
FEC3 0000h-FEC3 7FFFh | PCI Express* Port 5 | PC! Express® Root Port 5 I/OxAPIC Enable 
(PAE) set 
* 
FEC3 8000h-FEC3 BFFFh | PCI Express* Port 6 | foagy eae oor ore © H/OXAPIC Enable 


FFCO O000h-FFC7 FFFFh | Firmware Hub (or | Bit 8 in Firmware Hub Decode Enable register 
FF80 0000h-FF87 FFFFh PCI)? is set 
FFC8 OOOOh-FFCF FFFFh | Firmware Hub (or | Bit 9 in Firmware Hub Decode Enable register 
FF88 OO0OOh-FF8F FFFFh PCI)? is set 
FFDO O0000h-FFD7 FFFFh | Firmware Hub (or | Bit 10 in Firmware Hub Decode Enable register 
FF90 0000h-FF97 FFFFh PCI)? is set 
FFD8 OOOOh-FFDF FFFFh | Firmware Hub (or | Bit 11 in Firmware Hub Decode Enable register 
FF98 0000h-FFOF FFFFh PCI)? is set 
FFEO OOOh-FFE7 FFFFh Firmware Hub (or | Bit 12 in Firmware Hub Decode Enable register 
FFAO 0000h-FFA7 FFFFh PCI)? is set 
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Memory Decode Ranges from Processor Perspective (Sheet 2 of 2) 


Memory Range 
FFE8 OOOOh-FFEF FFFFh 
FFA8 0000h- FFAF FFFFh 


FFFO 0000h-FFF7 FFFFh 
FFBO 0000h-FFB7 FFFFh 


Target 


Firmware Hub (or 
Pcl)3 


Firmware Hub (or 
PCI)? 


FFF8 OO0Oh- FFFF FFFFh 
FFB8 0000h-FFBF FFFFh 


FF70 0000h- FF7F FFFFh 
FF30 0000h-FF3F FFFFh 
FF60 0000h-FF6F FFFFh 
FF20 0000h- FF2F FFFFh 
FF50 0000h-FF5F FFFFh 
FF10 0000h- FF1F FFFFh 


Firmware Hub (or 
PCI)2 


Firmware Hub (or 
PCI)2 


Firmware Hub (or 
PCI)? 


Firmware Hub (or 
PCI)2 


FF40 0000h- FF4F FFFFh 
FFOO 0000h-FFOF FFFFh 


128 KB anywhere in 4-GB 
range 

1 KB anywhere in 4-GB 
range 

1 KB anywhere in 4-GB 
range 


512 B anywhere in 64-bit 
addressing space 


= Firmware Hub (or 
: PCI)? 
Integrated LAN 
Controller 


USB EHCI 
Controller #12 


USB EHCI 
Controller #22 


Intel® High 
Definition Audio 
Host Controller 


High Precision 


FEDO X000h-FEDO X3FFh Event Timers 2 





Dependency/ Comments 


Bit 13 in Firmware Hub Decode Enable register 
is set 


Bit 14 in Firmware Hub Decode Enable register 
is set 


Always enabled. 
The top two, 64 KB blocks of this range can be 
swapped, as described in Section 7.4.1. 


Bit 3 in Firmware Hub Decode Enable register 
is set 


Bit 2 in Firmware Hub Decode Enable register 
is set 


Bit 1 in Firmware Hub Decode Enable register 
is set 


Bit 0 in Firmware Hub Decode Enable register 
is set 


Enable via BAR in Device 25: Function 0 
(Integrated LAN Controller) 


Enable via standard PCI mechanism (Device 
29, Function 7) 


Enable via standard PCI mechanism (Device 
26, Function 7) 


Enable via standard PCI mechanism (Device 
27, Function 0) 


BIOS determines the “fixed” location which is 
one of four, 1-KB ranges where X (in the first 
column) is Oh, 1h, 2h, or 3h. 





All other PCI None 
NOTES: 
1. Software must not attempt locks to memory mapped I/O ranges for USB EHCI or High 


Precision Event Timers. If attempted, the lock is not honored, which means potential 


deadlock conditions may occur. 


2: PCI is the target when the Boot BIOS Destination selection bits are set to 10b (Chipset 
Config Registers: Offset 3401 bits 11:10). When PCI selected, the Firmware Hub Decode 


Enable bits have no effect. 


Boot-Block Update Scheme 


The ICH9 supports a “top-block swap” mode that has the |CH9 swap the top block in 


the Firmware Hub (the boot block) with another location. This allows for safe update of 
the Boot Block (even if a power failure occurs). When the “TOP_SWAP” Enable bit is 
set, the ICH9 will invert A16 for cycles targeting Firmware Hub space. When this bit is 
0, the ICH9 will not invert A16. This bit is automatically set to 0 by RTCRST#, but not 
by PLTRST#. 


The scheme is based on the concept that the top block is reserved as the “boot” block, 


and the block immediately below the top block is reserved for doing boot- block 
updates. 
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The algorithm is: 
1. Software copies the top block to the block immediately below the top 


2. Software checks that the copied block is correct. This could be done by performing 
a checksum calculation. 


3. Software sets the TOP_SWAP bit. This will invert A1l6 for cycles going to the 
Firmware Hub. processor access to FFFF_0000h through FFFF_FFFFh will be 
directed to FFFE_0000h through FFFE_FFFFh in the Firmware Hub, and processor 
accesses to FFFE_0000h through FFFE_FFFF will be directed to FFFF_O000h 
through FFFF_FFFFh. 


. Software erases the top block 

. Software writes the new top block 

. Software checks the new top block 

. Software clears the TOP_SWAP bit 

8. Software sets the Top_ Swap Lock-Down bit 


N OO Ww f 


If a power failure occurs at any point after step 3, the system will be able to boot from 
the copy of the boot block that is stored in the block below the top. This is because the 
TOP_SWAP bit is backed in the RTC well. 


Note: The top-block swap mode may be forced by an external strapping option (See 
Section 2.24.1). When top-block swap mode is forced in this manner, the TOP_SWAP 
bit cannot be cleared by software. A re-boot with the strap removed will be required to 
exit a forced top-block swap mode. 


Note: Top-block swap mode only affects accesses to the Firmware Hub space, not feature 
space. 
Note: The top-block swap mode has no effect on accesses below FFFE_00O0Oh. 
§§ 
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10 


10.1 


Note: 


Table 10-1. 





Chipset Configuration Registers 


This section describes all registers and base functionality that is related to chipset 
configuration and not a specific interface (Such as LPC, PCI, or PCI Express*). It 
contains the root complex register block, which describes the behavior of the upstream 
internal link. 


This block is mapped into memory space, using the Root Complex Base Address (RCBA) 
register of the PCI-to-LPC bridge. Accesses in this space must be limited to 32-(DW) bit 
quantities. Burst accesses are not allowed. 


All Chipset Configuration Registers are located in the core well unless otherwise 
indicated. 


Chipset Configuration Registers (Memory Space) 


Address locations that are not shown should be treated as Reserved (see Section 9.2 
for details). 


Chipset Configuration Register Memory Map (Memory Space) (Sheet 1 of 4) 
ae, fae i eee ae 
Header 


0088-008Bh CIR1 Chipset Initialization Register 1 00000000h 
OOAC-O0AFh Root Error Command 0000h 


Root Complex Topology 
0100-0103h RCTCL Capability List 1A010005h 
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Table 10-1. Chipset Configuration Register Memory Map (Memory Space) (Sheet 2 of 4) 


[wrenonc | fesiternone [stunk | Type 


® . 2 age . 
0160-0163h IEEE Ha ener aun? 15xx0002h R/WO, RO 
Descriptor 
opee-oneen | ‘eoea | FS! Mah Bemnition Audio 00000000000D8000h 
Base Address 
B 


DD 
RPC 


0224-0227h | RPC Root Port Configuration 0000000yh 
0234-0327h DMIC DMI Control 00000000h | R/W, RO | 


G2sesaosen | ‘RerN: | BCR ROT Peicion Nenaber fer 00543210h R/WO, RO 
PCI Express Root Ports 
0290-0293h EPSS Function Level Reset Pending 00000000h 
Status Summary 
OF20-0F23h CIR13 ral Initialization Register B2B477CCh 
etn 


R/W 
aol ow 


2010-2013h DMI Miscellaneous Control 00000002h pow | 
register 
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Table 10-1. Chipset Configuration Register Memory Map (Memory Space) (Sheet 3 of 4) 


2034-2037h CIR7 Chipset Initialization Register 7 B2B477CCh 


R/W 
Chipset Initialization Register 

20C4-20C5h CIR11 11 (Mobile Only) 0000h R/W 
Chipset Initialization Register 

20E4-20E5h CIR12 12 (Mobile Only) 0000h R/W 

/W 

R/W 

R/W 


a 
aw RO 
fsiazcaian | 301R [Device 30 nterupt Route | 00007 | RO 
Device 25 Interrupt Route 


3300-3303h | sBemc3_ | Scheduled Break Event C3 00000000h 
(Mobile Only) 
3304-3307h | sBemca_ | Schedule Break Event C4 00000000h 
(Mobile Only) 
3400-3403h RC RTC Configuration 00000000h ae 
9 R/WLO 


3404-3407h | HptTc __| High Precision Timer 00000000h 
Configuration 
3410-3413h General Control and Status 000000yy0h PvE 
yy R/WLO 


- Oh 
Function Disable R, 
Function Disable SUS Well | ooh ~=«(|=SORW 
Chipset Initialization Register 8 

Chipset Initialization Register 9 R 


R, 
R, 
R, 
R, 
R, 
R, 


/W 
/W 
/W 
/W 
/W 
/W 

WwW 
/W 
/W 
/W 
/W 
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Table 10-1. Chipset Configuration Register Memory Map (Memory Space) (Sheet 4 of 4) 


| 3524-3525h | 3525h | PPO [USB Port Power Off = Port Power Off | = 0000h 


10.1.1 


10.1.2 


346 


352C-352Fh CIR10 acs Initialization Register o008cooshh ce vcs 


35F0-35F3h | = MAP USB Remap Control 00000000h 


VCH—Virtual Channel Capability Header Register 


Offset Address: 0000-0003h Attribute: R/WO 
Default Value: 10010002h Size: 32-bit 


a 
31:20 | Next Capability Offset (NCO) — R/WO. Indicates the next item in the list. 


19:16 Capability Version (CV) — R/WO. Indicates support as a version 1 capability 





structure. 
Capability 1D (CID) — R/WO. Indicates this is the Virtual Channel capability item. 





VCAP1—Virtual Channel Capability #1 Register 


Offset Address: 0004-0007h Attribute: RO, R/WO 
Default Value: 00000801h Size: 32-bit 


en 


11:10 Port Arbitration Table Entry Size (PATS) — RO. Indicates the size of the port 
; arbitration table is 4 bits (to allow up to 8 ports). 


Reference Clock (RC) — RO. Fixed at 100 ns. 


Reserved 


Extended VC Count (EVC) — R/WO. Indicates that there is one additional VC (VC1) 
that exists with extended capabilities. 





Low Priority Extended VC Count (LPEVC) — RO. Indicates that there are no 
additional VCs of low priority with extended capabilities. 
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10.1.3 VCAP2—Virtual Channel Capability #2 Register 


Offset Address: 0008-O00Bh Attribute: RO 
Default Value: | Q0000001h Size: 32-bit 


VC Arbitration Table Offset (ATO) — RO. Indicates that no table is present for VC 
arbitration since it is fixed. 


VC Arbitration Capability (AC) — RO. Indicates that the VC arbitration is fixed in 
the root complex. 





10.1.4 PVC—Port Virtual Channel Control Register 


Offset Address: O0O0C-0O00Dh Attribute: RO, R/W 
Default Value: 0000h Size: 16-bit 


as 


VC Arbitration Select (AS) — R/W. Indicates which VC should be programmed in 
the VC arbitration table. The root complex takes no action on the setting of this field 
since there is no arbitration table. 


Load VC Arbitration Table (LAT) — RO. Indicates that the table programmed 
should be loaded into the VC arbitration table. This bit is defined as read/write with 
always returning 0 on reads. 





10.1.5 PVS—Port Virtual Channel Status Register 


Offset Address: OOOE-OOOFh Attribute: RO 
Default Value: 0000h Size: 16-bit 


VC Arbitration Table Status (VAS) — RO. Indicates the coherency status of the VC 
Arbitration table when it is being updated. This field is always 0 in the root complex 
since there is no VC arbitration table. 
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10.1.6 VOCAP—Virtual Channel 0 Resource Capability Register 


Offset Address: 0010-0013h Attribute: RO 
Default Value: |00000001h Size: 32-bit 


a 


Port Arbitration Table Offset (AT) — RO. This VC implements no port arbitration 
table since the arbitration is fixed. 


Maximum Time Slots (MTS) — RO. This VC implements fixed arbitration, and 
therefore this field is not used. 


Reject Snoop Transactions (RTS) — RO. This VC must be able to take snoopable 
transactions. 


Advanced Packet Switching (APS) — RO. This VC is capable of all transactions, 
not just advanced packet switching transactions. 


Port Arbitration Capability (PAC) — RO. Indicates that this VC uses fixed port 
arbitration. 
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10.1.7 


10.1.8 


VvocTL—Virtual Channel 0 Resource Control Register 


Offset Address: 0014-0017h Attribute: R/W, RO 
Default Value: | 800000FFh Size: 32-bit 


Pee sero 
31 Virtual Channel Enable (EN) — RO. Always set to 1. VCO is always enabled and 
cannot be disabled. 


30:27 Reserved 


26:24 Virtual Channel Identifier (1D) — RO. Indicates the ID to use for this virtual 
: channel. 


23:20 Reserved 


Port Arbitration Select (PAS) — R/W. Indicates which port table is being 
19:17 | programmed. The root complex takes no action on this setting since the arbitration is 


fixed and there is no arbitration table. 


Load Port Arbitration Table (LAT) — RO. The root complex does not implement 
16 fed nae 
an arbitration table for this virtual channel. 
pa Transaction Class / Virtual Channel Map (TVM) — R/W. Indicates which 
7:1 


transaction classes are mapped to this virtual channel. When a bit is set, this 
transaction class is mapped to the virtual channel. 


Reserved 


VosTS—Virtual Channel 0 Resource Status Register 


Offset Address: 001A-001Bh Attribute: RO 
Default Value: | 0000h Size: 16-bit 


VC Negotiation Pending (NP) — RO. When set, indicates the virtual channel is still 





being negotiated with ingress ports. 


Port Arbitration Tables Status (ATS) — RO. There is no port arbitration table for 
this VC, so this bit is reserved at 0. 
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10.1.9 V1CAP—Virtual Channel 1 Resource Capability Register 


Offset Address: 001C-001Fh Attribute: R/WO, RO 
Default Value: 03008011h Size: 32-bit 


a 


Port Arbitration Table Offset (AT) — RO. Indicates the location of the port 
arbitration table in the root complex. A value of 3h indicates the table is at offset 
30h. 


Maximum Time Slots (MTS) — R/WO. This value is updated by platform BIOS 
based upon the determination of the number of time slots available in the platform. 


22:16 


Reject Snoop Transactions (RTS) — RO. All snoopable transactions on VC1 are 
15 : P : : 
rejected. This VC is for isochronous transfers only. 
14 Advanced Packet Switching (APS) — RO. This VC is capable of all transactions, 
not just advanced packet switching transactions. 


Port Arbitration Capability (PAC) — RO. Indicates the port arbitration capability is 
time-based WRR of 128 phases. 





10.1.10 V1CTL—Virtual Channel 1 Resource Control Register 


Offset Address: 0020-0023h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 
3 Virtual Channel Enable (EN) — R/W. Enables the VC when set. Disables the VC 
when cleared. 


26:24 Virtual Channel | dentifier (1D) — R/W. Indicates the ID to use for this virtual 
channel. 


Port Arbitration Select (PAS) — R/W. Indicates which port table is being 
19:17 | programmed. The only permissible value of this field is 4h for the time-based WRR 
entries. 
Load Port Arbitration Table (LAT) — R/W. When set, the port arbitration table 
loaded based upon the PAS field in this register. This bit always returns 0 when read. 


Reserved 


1 
16 
15:8 

Transaction Class / Virtual Channel Map (TVM) — R/W. Indicates which 
Til transaction classes are mapped to this virtual channel. When a bit is set, this 
transaction class is mapped to the virtual channel. 
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10.1.11 V1STS—Virtual Channel 1 Resource Status Register 


Offset Address: 0026-0027h Attribute: RO 
Default Value: 0000h Size: 16-bit 


ee easton 
Reserved 


VC Negotiation Pending (NP) — RO. When set, indicates the virtual channel is still 


being negotiated with ingress ports. 


Port Arbitration Tables Status (ATS) — RO. Indicates the coherency status of the 
port arbitration table. This bit is set when LAT (offset 000Ch: bit 0) is written with 
value 1 and PAS (offset 0014h: bits19: 17) has value of 4h. This bit is cleared after the 
table has been updated. 





10.1.12 PAT—Port Arbitration Table 


Offset Address: 0030-006Fh Attribute: 
Default Value: Size: 64-Byte 


This a 64-byte register that contains the arbitration table to be loaded into the port 
arbitration table. Every 4-bits contains an entry for one of the downstream PCI 
Express* ports or a Oh to indicate idol. The ports are mapped as follows: 


¢ Port 1: Value used is 1h. 
e Port 2: Value used is 2h. 
* Port 3: Value used is 3h. 
¢ Port 4: Value used is 4h. 
¢ Port 5: Value used is 5h. 
* Port 6: Value used is 6h. 
* Intel® High Definition Audio: Value used is Fh. 
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10.1.13 


10.1.14 


10.1.15 


352 


Cl R1—Chipset I nitialization Register 1 


Offset Address: 0088-008Bh Attribute: R/WO 
Default Value: | 00000000h Size: 32-bit 


as 


REC—Root Error Command Register 





Offset Address: OOAC-OOAFh Attribute: R/W 
Default Value: 0000h Size: 32-bit 


a 


Drop Poisoned Downstream Packets (DPDP) — R/W. Determines how 
downstream packets on DMI are handled that are received with the EP field set, 
indicating poisoned data: 

1: This packet and all subsequent packets with data received on DMI for any VC will 
have their Unsupported Transaction (UT) field set causing them to master Abort 
downstream. Packets without data such as memory, |O and config read requests are 
allowed to proceed. 


0: Packets are forwarded downstream without forcing the UT field set. 


RCTCL—Root Complex Topology Capabilities List Register 





Offset Address: 0100-0103h Attribute: RO 
Default Value: 1A010005h Size: 32-bit 


oe 
31:20 | Next Capability (NEXT) — RO. Indicates the next item in the list. 


19:16 | Capability Version (CV) — RO. Indicates the version of the capability structure. 


: Capability 1D (CID) — RO. Indicates this is a PCI Express* link capability section of 
ee an RCRB 
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10.1.16 


10.1.17 


10.1.18 


ESD—Element Self Description Register 


Offset Address: 0104-0107h Attribute: R/WO, RO 
Default Value: 00000802h Size: 32-bit 


oe 
Port Number (PN) — RO. A value of 0 to indicate the egress port for the Intel® 
31:24 ICH9 


Component ID (CID) — R/WO. Indicates the component ID assigned to this 
23:16 | element by software. This is written once by platform BIOS and is locked until a 


platform reset. 


Number of Link Entries (NLE) — RO. Indicates that one link entry (corresponding 
15:8 to DMI), 6 root port entries (for the downstream ports), and the Intel® High 
Definition Audio device are described by this RCRB. 
3:0 Element Type (ET) — RO. Indicates that the element type is a root complex 

, internal link. 





ULD—Upstream Link Descriptor Register 


Offset Address: 0110-0113h Attribute: R/WO, RO 
Default Value: |Q00000001h Size: 32-bit 


a 


31:24 Target Port Number (PN) — R/WO. This field is programmed by platform BIOS to 
: match the port number of the (G)MCH RCRB that is attached to this RCRB. 


23:16 Target Component ID (TCI D) — R/WO. This field is programmed by platform BIOS 
: to match the component ID of the (G)MCH RCRB that is attached to this RCRB. 


Link Type (LT) — RO. Indicates that the link points to the (G)MCH RCRB. 
| 0 | Link Valid (LV) — RO. Indicates that the link entry is valid. 


ULBA—Upstream Link Base Address Register 





Offset Address: 0118-011Fh Attribute: R/WO 
Default Value: | 0000000000000000h Size: 64-bit 


a 


Base Address Upper (BAU) — R/WO. This field is programmed by platform BIOS to 
match the upper 32-bits of base address of the (G)MCH RCRB that is attached to this 


RCRB. 


Base Address Lower (BAL) — R/WO. This field is programmed by platform BIOS to 
match the lower 32-bits of base address of the (G)MCH RCRB that is attached to this 
RCRB. 
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10.1.19 RP1D—Root Port 1 Descriptor Register 


Offset Address: 0120-0123h Attribute: R/WO, RO 
Default Value: 01xx0002h Size: 32-bit 


a 


31:24 al Port Number (PN) — RO. Indicates the target port number is Lh (root port 


Target Component ID (TCID) — R/WO. This field returns the value of the ESD.CID 
23:16 | (offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 


in the same component as the RCRB. 


Link Type (LT) — RO. Indicates that the link points to a root port. 


Link Valid (LV) — RO. When FD.PE1D (offset 3418h, bit 16) is set, this link is not 
valid (returns 0). When FD.PE1D is cleared, this link is valid (returns 1). 





10.1.20 RP1BA—Root Port 1 Base Address Register 


Offset Address: 0128-012Fh Attribute: RO 
Default Value: | OOOOOOO0000E0000h Size: 64-bit 


i 


10.1.21 RP2D—Root Port 2 Descriptor Register 


Offset Address: 0130-0133h Attribute: R/WO, RO 
Default Value: 02xx0002h Size: 32-bit 


as 


31:24 ae Port Number (PN) — RO. Indicates the target port number is 2h (root port 


Target Component I D (TCID) — R/WO. This field returns the value of the ESD.CID 
23:16 | (offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 
in the same component as the RCRB. 


Link Type (LT) — RO. Indicates that the link points to a root port. 





FD.PE2D (offset 3418h, bit 17) is set, the link for this root port is not valid (return 0). 
When RPC.PC is ‘00’ and FD.PE2D is cleared, the link for this root port is valid (return 
1). 





pe Link Valid (LV) — RO. When RPC.PC (offset 0224h, bits 1:0) is ‘01’, ‘10’, or ‘11’, or 
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10.1.22 


10.1.23 


10.1.24 


RP2BA—Root Port 2 Base Address Register 


Offset Address: 0138-013Fh Attribute: RO 
Default Value: | QOOOOO00000E1000h Size: 64-bit 


a 


63:28 | Reserved 


27:20 | Bus Number (BN) — RO. Indicates the root port is on bus #0. 


19:15 | Device Number (DN) — RO. Indicates the root port is on device #28. 
14:12 | Function Number (FN) — RO. Indicates the root port is on function #1. 
pipes 8] Reserved 





RP3D—Root Port 3 Descriptor Register 


Offset Address: 0140-0143h Attribute: R/WO, RO 
Default Value: §03xx0002h Size: 32-bit 


a 


31:24 di Port Number (PN) — RO. Indicates the target port number is 3h (root port 


Target Component ID (TCID) — R/WO. This field returns the value of the ESD.CID 
(offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 
in the same component as the RCRB. 


1 Link Type (LT) — RO. Indicates that the link points to a root port. 


Link Valid (LV) — RO. When RPC.PC (offset 0224h, bits 1:0) is ‘11’, or FD.PE3D 
(offset 3418h, bit 18) is set, the link for this root port is not valid (return 0). When 
RPC.PC is ‘00’, ‘01’, or “10’, and FD.PES3D is cleared, the link for this root port is valid 
(return 1). 





RP3BA—Root Port 3 Base Address Register 


Offset Address: 0148-014Fh Attribute: RO 
Default Value: | OOOOOO00000E2000h Size: 64-bit 


ee 
27:20 | Bus Number (BN) — RO. Indicates the root port is on bus #0. 


19:15 | Device Number (DN) — RO. Indicates the root port is on device #28. 
14:12 | Function Number (FN) — RO. Indicates the root port is on function #2. 
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10.1.25 RP4D—Root Port 4 Descriptor Register 


Offset Address: 0150-0153h Attribute: R/WO, RO 
Default Value: 04xx0002h Size: 32-bit 


a 


31:24 a Port Number (PN) — RO. Indicates the target port number is 4h (root port 


Target Component ID (TCID) — R/WO. This field returns the value of the ESD.CID 
23:16 | (offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 


in the same component as the RCRB. 


Reserved 


Link Type (LT) — RO. Indicates that the link points to a root port. 
Link Valid (LV) — RO. When RPC.PC (offset 0224h, bits 1:0) is ‘10’ or ‘11’, or 
FD.PE4D (offset 3418h, bit 19) is set, the link for this root port is not valid (return 0). 
When RPC.PC is ‘00’ or ‘01’ and FD.PE4D is cleared, the link for this root port is valid 
(return 1). 





10.1.26 RP4BA—Root Port 4 Base Address Register 


Offset Address: 0158-015Fh Attribute: RO 
Default Value: | OOOOOO00000E3000h Size: 64-bit 


os 


10.1.27  HDD—Intel® High Definition Audio Descriptor Register 


Offset Address: 0160-0163h Attribute: R/WO, RO 
Default Value: §OFxx0002h Size: 32-bit 


oe 
31:24 Target Port Number (PN) — RO. Indicates the target port number is 15h (Intel® 


High Definition Audio). 


Target Component I D (TCID) — R/WO. This field returns the value of the ESD.CID 
23:16 | (offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 





in the same component as the RCRB. 


Link Type (LT) — RO. Indicates that the link points to a root port. 


Definition Audio is not valid (return 0). When FD.ZD is cleared, the link to Intel High 
Definition Audio is valid (return 1). 


po Link Valid (LV) — RO. When FD.ZD (offset 3418h, bit 4) is set, the link to Intel High 
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10.1.28 


10.1.29 


10.1.30 


HDBA—I ntel® High Definition Audio Base Address Register 


Offset Address: 0168-016Fh Attribute: RO 
Default Value: | OQ0O0O00000000D8000h Size: 64-bit 


as 


63:28 | Reserved 


27:20 | Bus Number (BN) — RO. Indicates the root port is on bus #0. 


19:15 | Device Number (DN) — RO. Indicates the root port is on device #27. 
14:12 Function Number (FN) — RO. Indicates the root port is on function #0. 
11:0 Reserved 





RP5D—Root Port 5 Descriptor Register 


Offset Address: 0170-0173h Attribute: R/WO, RO 
Default Value: 05xx0002h Size: 32-bit 


a 


31:24 bd Port Number (PN) — RO. Indicates the target port number is 5h (root port 


Target Component ID (TCI D) — R/WO. This field returns the value of the ESD.CID 
(offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 
in the same component as the RCRB. 


1 Link Type (LT) — RO. Indicates that the link points to a root port. 


Link Valid (LV) — RO. When FD.PE5D (offset 3418h, bit 20) is set, the link for this 
root port is not valid (return 0). When FD.PESD is cleared, the link for this root port is 
valid (return 1). 





RP5BA—Root Port 5 Base Address Register 


Offset Address: 0178-017Fh Attribute: RO 
Default Value: | OOOOOO00000E4000h Size: 64-bit 


ae ae 
27:20 | Bus Number (BN) — RO. Indicates the root port is on bus #0. 


19:15 | Device Number (DN) — RO. Indicates the root port is on device #28. 
14:12 | Function Number (FN) — RO. Indicates the root port is on function #4. 
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10.1.31 


10.1.32 


10.1.33 


358 


RP6D—Root Port 6 Descriptor Register 


Offset Address: 0180-0183h Attribute: R/WO, RO 
Default Value: 06xx0002h Size: 32-bit 


a 


31:24 ta Port Number (PN) — RO. Indicates the target port number is 6h (root port 


Target Component ID (TCID) — R/WO. This field returns the value of the ESD.CID 
23:16 | (offset 0104h, bits 23:16) field programmed by platform BIOS, since the root port is 


in the same component as the RCRB. 


Reserved 


Link Type (LT) — RO. Indicates that the link points to a root port. 
Link Valid (LV) — RO. When RPC.PC2 (offset 0224h, bits 1:0) is ‘01’ or FD.PE6D 
(offset 3418h, bit 21) is set, the link for this root port is not valid (return 0). When 
RPC.PC is ‘00’ and FD.PE6D is cleared, the link for this root port is valid (return 1). 





RP6BA—Root Port 6 Base Address Register 


Offset Address: 0188-018Fh Attribute: RO 
Default Value: | OQOOOOO00000E5000h Size: 64-bit 


i 


| LCL—I nternal Link Capabilities List Register 





Offset Address: 01A0-01A3h Attribute: RO 
Default Value: |00010006h Size: 32-bit 


a 


| 31:20 | 20 | Next Capability Offset (NEXT) — RO. Indicates this is the last item in the list. 


= 16 | Capability Version (CV) — RO. Indicates the version of the capability structure. 


Capability 1D (CID) — RO. Indicates this is capability for DMI. 
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10.1.34 


10.1.35 


10.1.36 


LCAP—Link Capabilities Register 


Offset Address: 01A4-01A7h Attribute: R/WO, RO 
Default Value: 00012841h Size: 32-bit 


es 
31:18 Reserved 


17:15 
(Desktop | Reserved 
Only) 


17:15 
(Mobile L1 Exit Latency (EL1) — RO. L1 is supported on DMI. 


Only) 


LOs Exit Latency (ELO) — R/WO. This field indicates that exit latency is 128 ns to 
14:12 
less than 256 ns. 


. Active State Link PM Support (APMS) — R/WO. Indicates that LOs and L1 
11:10 ; 
(Mobile only) are supported on DMI. 


Maximum Link Width (MLW) — RO. Indicates the maximum link width is 4 ports. 


LCTL—Link Control Register 


Offset Address: 01A8-01A9h Attribute: R/W 
Default Value: 0000h Size: 16-bit 


as 


Extended Synch (ES) — R/W. When set, forces extended transmission of FTS 
ordered sets when exiting LOs prior to entering LO. 


Active State Link PM Control (APMC) — R/W. Indicates whether DMI should enter 
LOs. 


00 = Disabled 
01 = LOs entry enabled 
10 = Reserved 
11 = Reserved 








LSTS—Link Status Register 


Offset Address: 0O1AA-01ABh Attribute: RO 
Default Value: 0041h Size: 16-bit 


i 


Negotiated Link Width (NLW) — RO. Negotiated link width is x4 (000100b). 
ICH9M may also indicate x2 (000010b), depending on (G)MCH configuration. 


— Link Speed (LS) — RO. Link is 2.5 Gb/s. 
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10.1.37 


10.1.38 


10.1.39 
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CIR2 — Chipset Initialization Register 2 


Offset Address: 0O1F4-01F7h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


as 





CIR2 Field 1 — R/W. BIOS shall program to 86000040h 


CIR3 — Chipset Initialization Register 3 


Offset Address: 0O1FC-01FDh Attribute: R/W 
Default Value: 0000h Size: 16-bit 


as 
2 


Reserved 


CIR3 Field 1 — R/W. BIOS must program this field to 11b. 


BCR — Backbone Configuration Register 





Offset Address: 0220-0223h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 


| 6 | BCR Field 2 — R/W. BIOS must set this bit. 
BCR Field 1 — R/W. BIOS program this field to 101b 
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10.1.40 RPC—Root Port Configuration Register 


Offset Address: 0224-0227h Attribute: R/W, RO 
Default Value: © Q000000yh (y = 00xxb) Size: 32-bit 


a 


31:8 





Reserved 


High Priority Port Enable (HPE) — R/W. 


0 = The high priority path is not enabled. 
1 = The port selected by the HPP field in this register is enabled for high priority. It 
will be arbitrated above all other VCO (including integrated VCO) devices. 


High Priority Port (HPP) — R/W. This controls which port is enabled for high 
priority when the HPE bit in this register is set. 
111 = Reserved 
= Reserved 
Port 6 
Port 5 
Port 4 
Port 3 
Port 2 
= Port 1 


Port Configuration2 (PC2) — R/W. This controls how the PCI bridges are organized 
in various modes of operation for Ports 5 and 6. 


1 = Reserved 
0 = 2 xls, Port 5 (x1), Port 6 (x1) 
This bit is in the resume well and is only reset by RSMRST#. 


NOTE: Writing to this bit is for debug/testing only. This bit should be treated as Read 
Only and modifiable only through the GNT2# / GPIO53 pin strap. 


Port Configuration (PC) — R/W. This controls how the PCI bridges are organized in 
various modes of operation for Ports 1-4. For the following mappings, if a port is not 
shown, it is considered a x1 port with no connection. 


These bits represent the strap values of HDA_SDOUT (bit 1) and HDA_SYNC (bit 0) 
when TP[3] is not pulled low at the rising edge of PWROK. 


1 x4, Port 1 (x4) 
Reserved 
Reserved (Desktop Only) 
1x2 and 2x1s, Port 1 (x2), Port 3 (x1) and Port 4 (x1) (Mobile Only) 
= 4 x\1s, Port 1 (x1), Port 2 (x1), Port 3 (x1) and Port 4 (x1) 
These bits live in the resume well and are only reset by RSMRST#. 


NOTE: Writing to these bits is for debug/testing only. These bits should be treated 
as Read Only and modifiable only through the HDA_SDOUT and HDA_SYNC 
pin straps. 
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10.1.41 DMIC—DMI Control Register 


Offset Address: 0234-0237h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 


DMI Clock Gate Enable (DMICGEN) — R/W. BIOS must program this field to 11b. 


10.1.42 RPFN—Root Port Function Number and Hide for PCI 
Express* Root Ports 





Offset Address: 0238-023Ch Attribute: R/WO, RO 
Default Value: 00543210h Size: 32-bit 


For the PCI Express root ports, the assignment of a function number to a root port is 
not fixed. BIOS may re-assign the function numbers on a port by port basis. This 
capability will allow BIOS to disable/hide any root port and still have functions 0 thru N- 
1 where N is the total number of enabled root ports. 


Port numbers will remain fixed to a physical root port. 


The existing root port Function Disable registers operate on physical ports (not 
functions). 


Port Configuration (1x4, 4x1, etc.) is not affected by the logical function number 
assignment and is associated with physical ports. 


2 re ee 


Root Port 6 Config Hide (RP6CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 


Root Port 6 Function Number (RP6FN) — R/WO. These bits set the function 
number for PCI Express Root Port 6. This root port function number must be a 
unique value from the other root port function numbers 


Root Port 5 Config Hide (RP5CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 


Root Port 5 Function Number (RP5FN) — R/WO. These bits set the function 
number for PCI Express Root Port 5. This root port function number must be a 
unique value from the other root port function numbers 


Root Port 4 Config Hide (RP4CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 


Root Port 4 Function Number (RP4FN) — R/WO. These bits set the function 
number for PCI Express Root Port 4. This root port function number must be a 
unique value from the other root port function numbers 


Root Port 3 Config Hide (RP3CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 
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Root Port 3 Function Number (RP3FN) — R/WO. These bits set the function 
number for PCI Express Root Port 3. This root port function number must be a 
unique value from the other root port function numbers 


Root Port 2 Config Hide (RP2CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 


Root Port 2 Function Number (RP2FN) — R/WO. These bits set the function 
number for PCI Express Root Port 2. This root port function number must be a 
unique value from the other root port function numbers 


Root Port 1 Config Hide (RP1CH) — RW. This bit is used to hide the root port and 
any devices behind it from being discovered by the OS. When set to ‘1’ the root port 
will not claim any downstream configuration transactions. 


Root Port 1 Function Number (RP1FN) — R/WO. These bits set the function 
number for PCI Express Root Port 1. This root port function number must be a 
unique value from the other root port function numbers 





10.1.43 FLRSTAT—FLR Pending Status Register 


Offset Address: 0290-0293h Attribute: RO 
Default Value: 00000000h Size: 32-bit 


oe 
31:24 Reserved. 


FLR Pending Status for D29:F7, EHCI #1 — RO. 
23 0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


22:20 Reserved. 


FLR Pending Status for D29:F3, UHCI #6 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


FLR Pending Status for D29:F2, UHCI #3 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


FLR Pending Status for D29:FO, UHCI #1 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


FLR Pending Status for D26:F7, EHC] #2 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


FLR Pending Status for D26:F2, UHCI #6 — RO. 
10 0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 
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FLR Pending Status for D29:F1, UHCI #2 — RO. 
17 0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 
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10.1.45 


10.1.46 


364 


as 


FLR Pending Status for D26:F1, UHCI #5 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


FLR Pending Status for D26:FO, UHCI #4 — RO. 
0 = Function Level Reset is not pending. 
1 = Function Level Reset is pending. 


CI R13—Chipset Initialization Register 13 


Offset Address: OF20h-OF23h Attribute: R/W 
Default Value: B2B477CCh Size: 32-bit 


os 


CI R5—Chipset Initialization Register 5 








Offset Address: 1D40h-1D47h Attribute: R/W 
Default Value: 0000000000000000h Size: 64-bit 


es 
| 0 | CIR5 Field 1 — R/W. BIOS must program this field to 1b. 


TRSR—Trap Status Register 


Offset Address: 1E00-1E03h Attribute: R/WC, RO 
Default Value: 00000000h Size: 32-bit 


oe 


Cycle Trap SMI # Status (CTSS) — R/WC. These bits are set by hardware when the 
corresponding Cycle Trap register is enabled and a matching cycle is received (and 
trapped). These bits are OR’ed together to create a single status bit in the Power 





Management register space. 
Note that the SMI# and trapping must be enabled in order to set these bits. 


These bits are set before the completion is generated for the trapped cycle, thereby 
ensuring that the processor can enter the SMI# handler when the instruction 
completes. Each status bit is cleared by writing a 1 to the corresponding bit location 
in this register. 
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10.1.47 


10.1.48 


TRCR—Trapped Cycle Register 


Offset Address: 1E10-1E17h Attribute: RO 
Default Value: 0000000000000000h Size: 64-bit 


This register saves information about the I/O Cycle that was trapped and generated the 
SMI# for software to read. 


oe 
63:25 | Reserved 


Read/ Write# (RWI) — RO. 
24 0 = Trapped cycle was a write cycle. 
1 = Trapped cycle was a read cycle. 


23:20 Reserved 


corresponding byte is enabled in the cycle. 


15:2 Trapped I/ O Address (TIOA) — RO. This is the dword-aligned address of the 
, trapped cycle. 


TWDR—Trapped Write Data Register 


Offset Address: 1E18-1E1Fh Attribute: RO 
Default Value: 0000000000000000h Size: 64-bit 


Active-high Byte Enables (AHBE) — RO. This is the dword-aligned byte enables 
19:16 | associated with the trapped cycle. A 1 in any bit location indicates that the 





This register saves the data from I/O write cycles that are trapped for software to read. 


Ce easton 
63:32 | Reserved 





31:0 Trapped I/O Data (TIOD) — RO. Dword of I/O write data. This field is undefined 
: after trapping a read cycle. 
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1OTRn — I/ O Trap Register (0-3) 


Offset Address: 1E80-1E87h Register 0 Attribute: R/W 
1E88-1E8Fh Register 1 
1E90-1E97h Register 2 
1E98-1E9Fh Register 3 

Default Value: | 0000000000000000h Size: 64-bit 


These registers are used to specify the set of |/O cycles to be trapped and to enable 
this functionality. 


bn 


Read/ Write Mask (RWM) — R/W. 


0 = The cycle must match the type specified in bit 48. 
1 = Trapping logic will operate on both read and write cycles. 


Read/ Write# (RWIO) — R/W. 
0 = Write 
1 = Read 

NOTE: The value in this field does not matter if bit 49 is set. 


Byte Enable Mask (BEM) — R/W. A 1 in any bit position indicates that any value in 
39:36 | the corresponding byte enable bit in a received cycle will be treated as a match. The 
corresponding bit in the Byte Enables field, below, is ignored. 
35:32 | Byte Enables (TBE) — R/W. Active-high dword-aligned byte enables. 


Address[7:2] Mask (ADMA) — R/W. A 1 in any bit position indicates that any value 
in the corresponding address bit in a received cycle will be treated as a match. The 
23:18 | corresponding bit in the Address field, below, is ignored. The mask is only provided 


for the lower 6 bits of the dword address, allowing for traps on address ranges up to 
256 bytes in size. 


po Trap and SMI# Enable (TRSE) — R/W. 
0 = Trapping and SMI# logic disabled. 


1 = The trapping logic specified in this register is enabled. 
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10.1.50 DMC—DMI Miscellaneous Control Register 


Offset Address: 2010-2013h Attribute: R/W 
Default Value: | 00000002h Size: 32-bit 


oe 
31:20 Reserved 


DMI Misc. Control Field 1 — R/W. BIOS shall always program this field as per the 
BIOS Specification. 

ao 0 = Disable DMI Power Savings. 
1 = Enable DMI Power Savings. 


18:12 Reserved 


DMI Misc. Control Field 2 — R/W. BIOS shall set these bits to 11b 


(Desktop | Reserved 


OE 
10.1.51 ClIR6—Chipset Initialization Register 6 


Offset Address: 2024-2027h Attribute: R/W 
Default Value: | 0B4030COh Size: 32-bit 


es 


23:21 


(Mobile | CIR6 Field 2 — R/W. BIOS must program this field to 011b. 
Only) 





Reserved 


Reserved 


CIR6 Field 1 — R/W. BIOS must clear this bit. 
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10.1.52 


10.1.53 


10.1.54 


368 


Cl R7—Chipset I nitialization Register 7 


Offset Address: 2034-2037h Attribute: R/W 
Default Value: B2B477CCh Size: 32-bit 


as 


CIR7 Field 1 — R/W. BIOS must program this field to 0101b. 
CIiR11—Chipset Initialization Register 11 (Mobile Only) 


Offset Address: 20C4-20C5h Attribute: R/W 
Default Value: 0000h Size: 16-bit 


a 
CIR11 Field 1— R/W. BIOS may program this field to 1b. 


CI R12—Chipset Initialization Register 12 (Mobile Only) 


Offset Address: 20E4-20E5h Attribute: R/W 
Default Value: 0000h Size: 16-bit 


| Bit | Description 








CIR12 Field 1— R/W. BIOS may program this field to 1b. 
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10.1.55 TCTL—TCO Configuration Register 


Offset Address: 3000-3000h Attribute: R/W 
Default Value: 00h Size: 8- bit 


10.1.56 


TCO IRQ Enable (IE) — R/W. 


0 = TCO IRQ is disabled. 
1 = TCO IRQ is enabled, as selected by the TCO_IRQ_SEL field. 


TCO IRQ Select (1S) — R/W. Specifies on which IRQ the TCO will internally appear. 
If not using the APIC, the TCO interrupt must be routed to 1RQ9-11, and that 
interrupt is not sharable with the SERIRQ stream, but is shareable with other PCI 
interrupts. If using the APIC, the TCO interrupt can also be mapped to IRQ20-23, and 
can be shared with other interrupt. 
000 = IRQ9 
001 = IRQ 10 
=IRQ11 

Reserved 

IRQ 20 (only if APIC enabled) 

IRQ 21 (only if APIC enabled) 

IRQ 22 (only if APIC enabled) 

IRQ 23 (only if APIC enabled) 
When setting the these bits, the IE bit should be cleared to prevent glitching. 


When the interrupt is mapped to APIC interrupts 9, 10 or 11, the APIC should be 
programmed for active-high reception. When the interrupt is mapped to APIC 
interrupts 20 through 23, the APIC should be programmed for active-low reception. 





D311 P—Device 31 Interrupt Pin Register 


Offset Address: 3100-3103h Attribute: R/W, RO 
Default Value: 03243200h Size: 32-bit 


os 


27:24 


Thermal Throttle Pin (TTIP) — R/W. Indicates which pin the Thermal Throttle 
controller drives as its interrupt 

Oh = No interrupt 

lh = INTA# 

2h = INTB# (Default) 

3h = INTC# 

4h = INTD# 


5h-Fh = Reserved 


SATA Pin 2 (SIP2) — R/W. Indicates which pin the SATA controller 2 drives as its 
interrupt. 

Oh = No interrupt 

lh = INTA# 

2h = INTB# (Default) 

3h = INTC# 

4h = INTD# 

5h-Fh = Reserved 
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SM Bus Pin (SMIP) — R/W. Indicates which pin the SMBus controller drives as its 
interrupt. 

Oh = No interrupt 

Lh = INTA# 

2h = INTB# (Default) 

3h = INTC# 

4h = INTD# 

5h-Fh = Reserved 


SATA Pin (SIP) — R/W. Indicates which pin the SATA controller drives as its 


interrupt. 

Oh = No interrupt 

lh = INTA# 

2h = INTB# (Default) 
3h = INTC# 

4h = INTD# 

5h-Fh = Reserved 


3:0 LPC Bridge Pin (LIP) — RO. Currently, the LPC bridge does not generate an interrupt, 
, so this field is read-only and 0. 





10.1.57 D30IP—Device 30 Interrupt Pin Register 


370 


Offset Address: 3104-3107h Attribute: RO 
Default Value: 00000000h Size: 32-bit 


i 


so this field is read-only and 0. 





PCI Bridge Pin (PIP) — RO. Currently, the PCI bridge does not generate an interrupt, 
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10.1.58 D291 P—Device 29 Interrupt Pin Register 


Offset Address: 3108-310Bh Attribute: R/W 
Default Value: 10004321h Size: 32-bit 


a 


EHCI Pin (EIP) — R/W. Indicates which pin the EHC! controller #1 drives as its 
interrupt. 


Oh = No interrupt 

Lh = INTA# (Default) 
2h = INTB# 

3h = INTC# 

4h = INTD# 

5h-7h = Reserved 


UHCI #6 Pin (U3P) — R/W. Indicates which pin the UHCI controller #6 (Device 29 
Function 3) drives as its interrupt, if controller exists 


Oh = No interrupt 

Lh = INTA# 

2h = INTB# 

3h = INTC# 

4h = INTD# (Default) 


5h-7h = Reserved 
NOTE: This field should be set to Oh when UHCI Controller #6 Remap bit (RCBA 
offset 35FOh: bit 0) is set to 0. 


UHCI #3 Pin (U2P) — R/W. Indicates which pin the UHCI controller #3 (Device 29 
Function 2) drives as its interrupt. 


Oh = No interrupt 

lh = INTA# 

2h = INTB# 

3h = INTC# (Default) 
4h = INTD# 

5h-7h = Reserved 


UHCI #2 Pin (U1P) — R/W. Indicates which pin the UHCI controller #2 (Device 29 
Function 1) drives as its interrupt. 


Oh = No interrupt 

lh = INTA# 

2h = INTB# (Default) 

3h = INTC# 

4h = INTD# 

5h-7h = Reserved 

UHCI #1 Pin (UOP) — R/W. Indicates which pin the UHCI controller #1 (Device 29 
Function 0) drives as its interrupt. 
Oh = No interrupt 

1h = INTA# (Default) 

2h = INTB# 

3h = INTC# 

4h = INTD# 

5h-7h = Reserved 
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10.1.59 D281 P—Device 28 Interrupt Pin Register 


372 





Offset Address: 310C-310Fh Attribute: R/W 
Default Value: 00214321h Size: 32-bit 


oe 


PCI Express* #6 Pin (P6IP) — R/W. Indicates which pin the PCI Express* port #6 
drives as its interrupt. 
Oh = No interrupt 
lh = INTA# 
23:20 
2h = INTB# (Default) 
3h = INTC# 
4h = INTD# 
5h-7h = Reserved 
PCI Express #5 Pin (P51P) — R/W. Indicates which pin the PCI Express port #5 
drives as its interrupt. 
Oh = No interrupt 
. Lh = INTA# (Default) 
19:1 
: 2h = INTB# 
3h = INTC# 
4h = INTD# 
5h-7h = Reserved 
PCI Express #4 Pin (P41P) — R/W. Indicates which pin the PCI Express* port #4 
drives as its interrupt. 
Oh = No interrupt 
lh = INTA# 
15:12 
2h = INTB# 
3h = INTC# 
4h = INTD# (Default) 
5h-7h = Reserved 


PCI Express #3 Pin (P31IP) — R/W. Indicates which pin the PCI Express port #3 
drives as its interrupt. 

Oh = No interrupt 

Lh = INTA# 

2h = INTB# 

3h = INTC# (Default) 

4h = INTD# 

5h-7h = Reserved 


PCI Express #2 Pin (P21P) — R/W. Indicates which pin the PCI Express port #2 
drives as its interrupt. 
Oh = No interrupt 
74 lh = INTA# 
2h = INTB# (Default) 
3h = INTC# 
4h = INTD# 
5h-7h = Reserved 


PCI Express #1 Pin (P11P) — R/W. Indicates which pin the PCI Express port #1 
drives as its interrupt. 

Oh = No interrupt 

1h = INTA# (Default) 

2h = INTB# 

3h = INTC# 

4h = INTD# 

5h-7h = Reserved 
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10.1.60 D271P—Device 27 Interrupt Pin Register 


Offset Address: 3110-3113h Attribute: R/W 
Default Value: | 00000001h Size: 32-bit 


as 


31:4 Reserved 





Intel® High Definition Audio Pin (ZIP) — R/W. Indicates which pin the Intel High 
Definition Audio controller drives as its interrupt. 
Oh = No interrupt 
1h = INTA# (Default) 
3:0 | 2h = INTB# 
3h = INTC# 
4h = INTD# 
5h-Fh = Reserved 
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10.1.61 D26IP—Device 26 Interrupt Pin Register 
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Offset Address: 3114-3117h Attribute: R/W 
Default Value: | 30000321h Size: 32-bit 


a 


EHC! #2 Pin (E21 P) — R/W. Indicates which pin the EHCI controller #2 drives as its 
interrupt: 

Oh = No Interrupt 

Lh = INTA# 

2h = INTB# 

3h = INTC# (Default) 

4h = INTD# 

5h-Fh = Reserved 


UHCI #6 Pin (U2P) — R/W. Indicates which pin UHCI controller #6 (Device 26 

Function 2) drives as its interrupt, if controller exists. 

Oh = No Interrupt 

Lh = INTA# 

2h = INTB# 

3h = INTC# (Default) 

4h = INTD# 

5h-Fh = Reserved 

NOTE: This field should be set to Oh when UHCI Controller #6 Remap bit (RCBA 
offset 35FOh: bit 0) is set to 1. 


UHCI #5 Pin (U1P) — R/W. Indicates which pin UHCI controller #5 (Device 26 
Function 1), drives as its interrupt. 
Oh = No Interrupt 
7:4 Lh = INTA# 
2h = INTB# (Default) 
3h = INTC# 
4h = INTD# 
5h-Fh = Reserved 


UHCI #4 Pin (UOP) — R/W. Indicates which pin UHCI controller #4 (Device 26 
Function 0), drives as its interrupt. 

Oh = No Interrupt 

1h = INTA# (Default) 

2h = INTB# 

3h = INTC# 

4h = INTD# 

5h-Fh = Reserved 
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10.1.62 D25IP—Device 25 Interrupt Pin Register 


Offset Address: 3118-311Bh Attribute: R/W 
Default Value: |Q0000001h Size: 32-bit 


31:4 Reserved 


GBE LAN Pin (LIP) — R/W. Indicates which pin the internal GbE LAN controller 
drives as its interrupt 
Oh = No Interrupt 
3:0 1h = INTA# (Default) 
2h = INTB# 
3h = INTC# 
4h = INTD# 
5h-Fh = Reserved 


10.1.63 D311 R—Device 31 Interrupt Route Register 


Offset Address: 3140-3141h Attribute: R/W 
Default Value: 3210h Size: 16-bit 


as 
a 


Interrupt D Pin Route (IDR) — R/W. Indicates which physical pin on the Intel® 
ICH is connected to the INTD# pin reported for device 31 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 31 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 
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Interrupt B Pin Route (I1BR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 31 functions. 

Oh = PIRQA# 

1h = PIRQB# (Default) 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt A Pin Route (1 AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 31 functions. 

Oh = PIRQA# (Default) 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 





10.1.64 D30IR—Device 30 Interrupt Route Register 


Offset Address: 3142-3143h Attribute: RO 
Default Value: 0000h Size: 16-bit 


a 





15:0 Reserved. No interrupts generated from Device 30. 
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10.1.65 D29IR—Device 29 Interrupt Route Register 


Offset Address: 3144-3145h Attribute: R/W 

Default Value: 3210h Size: 16-bit 

a 
Reserved 


Interrupt D Pin Route (IDR) — R/W. Indicates which physical pin on the Intel® 
ICH is connected to the INTD# pin reported for device 29 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 29 functions. 

Oh = PIRQA# 

lh = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt B Pin Route (IBR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 29 functions. 
Oh = PIRQA# 
1h = PIRQB# (Default) 

6:4 2h = PIRQC# 

: 3h = PIRQD# 

4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 


Reserved 


Interrupt A Pin Route (1 AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 29 functions. 


Oh = PIRQA# (Default) 
Lh = PIRQB# 
2h = PIRQC# 
3h = PIRQD# 
4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 
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Offset Address: 3146-3147h Attribute: R/W 
Default Value: 3210h Size: 16-bit 


a 


Interrupt D Pin Route (IDR) — R/W. Indicates which physical pin on the Intel® 
ICH is connected to the INTD# pin reported for device 28 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 28 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 


7h = PIRQH# 


Interrupt B Pin Route (IBR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 28 functions. 

Oh = PIRQA# 

1h = PIRQB# (Default) 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt A Pin Route (1AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 28 functions. 

Oh = PIRQA# (Default) 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 
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10.1.67 D271 R—Device 27 Interrupt Route Register 


Offset Address: 3148-3149h Attribute: R/W 

Default Value: 3210h Size: 16-bit 

Pee sero 
Reserved 


Interrupt D Pin Route (IDR) — R/W. Indicates which physical pin on the Intel® 
ICH is connected to the INTD# pin reported for device 27 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 27 functions. 

Oh = PIRQA# 

lh = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt B Pin Route (IBR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 27 functions. 
Oh = PIRQA# 
1h = PIRQB# (Default) 

6:4 2h = PIRQC# 

: 3h = PIRQD# 

4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 


Reserved 


Interrupt A Pin Route (1 AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 27 functions. 


Oh = PIRQA# (Default) 
Lh = PIRQB# 
2h = PIRQC# 
3h = PIRQD# 
4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 
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10.1.68 D26IR—Device 26 Interrupt Route Register 
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Offset Address: 314C-314Dh Attribute: R/W 
Default Value: 3210h Size: 16-bit 


as 


Interrupt D Pin Route (IDR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTD# pin reported for device 26 functions: 

Oh = PIRQA# 

lh = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 26 functions. 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt B Pin Route (IBR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 26 functions. 

Oh = PIRQA# 

1h = PIRQB# (Default) 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Interrupt A Pin Route (1AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 26 functions. 

Oh = PIRQA# (Default) 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 
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10.1.69 D25IR—Device 25 Interrupt Route Register 


Offset Address: 3150-3151h Attribute: R/W 
Default Value: 3210h Size: 16-bit 


as 


Reserved 


Interrupt D Pin Route (IDR): — R/W. Indicates which physical pin on the ICH is 
connected to the INTD# pin reported for device 25 functions: 

Oh = PIRQA# 

1h = PIRQB# 

2h = PIRQC# 

3h = PIRQD# (Default) 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt C Pin Route (ICR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTC# pin reported for device 25 functions. 

Oh = PIRQA# 

lh = PIRQB# 

2h = PIRQC# (Default) 

3h = PIRQD# 

4h = PIRQE# 

5h = PIRQF# 

6h = PIRQG# 

7h = PIRQH# 


Reserved 


Interrupt B Pin Route (IBR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTB# pin reported for device 25 functions. 
Oh = PIRQA# 
1h = PIRQB# (Default) 

6:4 2h = PIRQC# 

: 3h = PIRQD# 

4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 


Reserved 


Interrupt A Pin Route (1 AR) — R/W. Indicates which physical pin on the ICH is 
connected to the INTA# pin reported for device 25 functions. 


Oh = PIRQA# (Default) 
Lh = PIRQB# 
2h = PIRQC# 
3h = PIRQD# 
4h = PIRQE# 
5h = PIRQF# 
6h = PIRQG# 
7h = PIRQH# 
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10.1.70 OlC—Other Interrupt Control Register 


Offset Address: 31FF-31FFh Attribute: R/W 
Default Value: 00h Size: 8- bit 


APIC Range Select (ASEL) — R/W.These bits define address bits 15:12 for the 
IOxAPIC range. The default value of Oh enables compatibility with prior |CH products 
as an initial value. This value must not be changed unless the |OxAPIC Enable bit is 
cleared. 


7:4 
Coprocessor Error Enable (CEN) — R/W. 
1 0 = FERR# will not generate IRQ13 nor |GNNE#. 
1 = If FERR# is low, the Intel® ICH9 generates 1RQ13 internally and holds it until an 
1/O port FOh write. It will also drive |GNNE# active. 


APIC Enable (AEN) — R/W. 

0 = The internal |OxAPIC is disabled. 

1 = Enables the internal |OxAPIC and its address decode. 

NOTE: SW should read this register after modifying APIC enable bit prior to access to 
the |OxAPIC address range. 





10.1.71 SBEMC3—Scheduled Break Event C3 Exit Latency (Mobile 


Only) 
Offset Address: 3300-3303h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 


31:23 | Reserved. 


22:16 Present State C3 Future State C3 Exit Latency (C3C3EL) — R/W. 
; Sets exit latency if present and future C-state is C3. 


15 Reserved. 


Reserved. 


Present State CO Future State C3 Exit Latency (COC3EL) — R/W. 
Sets exit latency if present c-state is CO and future C-state is C3. 


Present State C2 Future State C3 Exit Latency (C2C3EL) — R/W. 
Sets exit latency if present c-state is C2 and future C-state is C3. 
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10.1.72 SBEMC4—Scheduled Break Event C4 Exit Latency (Mobile 


Only) 
Offset Address: 3304-3307h Attribute: R/W 
Default Value: | 00000000h Size: 32-bit 


es 


30:24 Present State C4 Future State C4 Exit Latency (C4C4EL) — R/W. 
: Sets exit latency if present and future c-state is C4. 
Present State C3 Future State C4 Exit Latency (C3C4EL) — R/W. 
Sets exit latency if present c-state is C3 and future C-state is C4. 


i 
14:8 Present State C2 Future State C4 Exit Latency (C2C4EL) — R/W. 
: Sets exit latency if present c-state is C2 and future C-state is C4. 
Present State CO Future State C4 Exit Latency (COC4EL) — R/W. 
Sets exit latency if present c-state is CO and future C-state is C4. 
10.1.73 RC—RTC Configuration Register 


Offset Address: 3400-3403h Attribute: R/W, R/WLO 
Default Value: 00000000h Size: 32-bit 


Upper 128 Byte Lock (UL) — R/WLO. 


0 = Bytes not locked. 

1 = Bytes 38h-3Fh in the upper 128-byte bank of RTC RAM are locked and cannot be 
accessed. Writes will be dropped and reads will not return any ensured data. Bit 
reset on system reset. 


Lower 128 Byte Lock (LL) — R/WLO. 





0 = Bytes not locked. 

1 = Bytes 38h-3Fh in the lower 128-byte bank of RTC RAM are locked and cannot be 
accessed. Writes will be dropped and reads will not return any ensured data. Bit 
reset on system reset. 


Upper 128 Byte Enable (UE) — R/W. 


0 = Bytes locked. 
1 = The upper 128-byte bank of RTC RAM can be accessed. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 383 


a ® 
| n tel ) Chipset Configuration Registers 


10.1.74 HPTC—High Precision Timer Configuration Register 


Offset Address: 3404-3407h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 


Address Enable (AE) — R/W. 

0 = Address disabled. 

1 = The Intel® ICH9 will decode the High Precision Timer memory address range 
selected by bits 1:0 below. 


Address Select (AS) — R/W. This 2-bit field selects 1 of 4 possible memory address 
ranges for the High Precision Timer functionality. The encodings are: 


00 = FEDO_0000h - FEDO_03FFh 
01 = FEDO_1000h - FEDO_13FFh 
10 = FEDO_2000h - FEDO_23FFh 
11 = FEDO_3000h - FEDO_33FFh 
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10.1.75 GCS—General Control and Status Register 


Offset Address: 3410-3413h Attribute: R/W, R/WLO 
Default Value: | Q0000yyO0h (yy = xx0000x0b) Size: 32-bit 


Pee sero 
31:13 | Reserved. 
Function Level Reset Capability Structure Select (FLRCSSEL) — R/W. 
12 0 = Function Level Reset (FLR) will utilize the standard capability structure with 
unique capability ID assigned by PCISIG. 
1 = Vendor Specific Capability Structure is selected for FLR. 


Boot BIOS Straps (BBS) — R/W. This field determines the destination of accesses 
to the BIOS memory range. The default values for these bits represent the strap 
values of GNTO# (bit 11) at the rising edge of PWROK and SPI_CS1#/GPI058 
(Desktop Only) /CLGPIO6 (Digital Office Only) (bit 10) at the rising edge of 
CLPWROK. 


Bits 11:10 Description 
Oxb SPI 
10b PCl 
11b LPC 


When PCI is selected, the top 16MB of memory below 4GB (FFOO_0000h to 
FFFF_FFFFh) is accepted by the primary side of the PCI P2P bridge and forwarded to 
the PCI bus. This allows systems with corrupted or unprogrammed flash to boot from 
a PCI device. The PCI-to-PCI bridge Memory Space Enable bit does not need to be set 
(nor any other bits) in order for these cycles to go to PCI. Note that BIOS decode 
range bits and the other BIOS protection bits have no effect when PCI is selected. 
This functionality is intended for debug/testing only. 

When SPI or LPC is selected, the range that is decoded is further qualified by other 
configuration bits described in the respective sections. 

The value in this field can be overwritten by software as long as the BIOS Interface 
Lock-Down (bit 0) is not set. 


NOTE: Booting to PCI is intended for debug/testing only. Boot BIOS Destination 
Select to LPC/PCI by functional strap or via Boot BIOS Destination Bit will not 
affect SPI accesses initiated by Management Engine or Integrated GbE LAN. 


Server Error Reporting Mode (SERM) — R/W. 

0 = The Intel® 1CH9 is the final target of all errors. The (G)MCH sends a messages to 
the ICH for the purpose of generating NMI. 

1 = The (G)MCH is the final target of all errors from PCI Express* and DMI. In this 
mode, if the |CH9 detects a fatal, non-fatal, or correctable error on DMI or its 


downstream ports, it sends a message to the (G)MCH. If the |CH9 receives an 
ERR_* message from the downstream port, it sends that message to the 


FERR# MUX Enable (FME) — R/W. This bit enables FERR# to be a processor break 
event indication. 

0 = Disabled. 

1 = The ICH9 examines FERR# during a C2, C3, or C4 state as a break event. 


See Chapter 5.13.5 for a functional description. 
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No Reboot (NR) — R/W. This bit is set when the “No Reboot” strap (SPKR pin on 

ICH9) is sampled high on PWROK. This bit may be set or cleared by software if the 

strap is sampled low but may not override the strap when it indicates “No Reboot”. 

0 = System will reboot upon the second timeout of the TCO timer. 

1 = The TCO timer will count down and generate the SMI# on the first timeout, but 
will not reboot on the second timeout. 


Alternate Access Mode Enable (AME) — R/W. 


0 = Disabled. 

1 = Alternate access read only registers can be written, and write only registers can 
be read. Before entering a low power state, several registers from powered down 
parts may need to be saved. In the majority of cases, this is not an issue, as 
registers have read and write paths. However, several of the ISA compatible 
registers are either read only or write only. To get data out of write-only 
registers, and to restore data into read-only registers, the |CH implements an 
alternate access mode. For a list of these registers see Section 5.13.10. 


Shutdown Policy Select (SPS) — R/W. When cleared (default), the 1CH9 will drive 
INIT# in response to the shutdown Vendor Defined Message (VDM). When set to 1, 
ICH9 will treat the shutdown VDM similar to receiving a CF9h I/O write with data 
valueO6h, and will drive PLTRST# active. 


Reserved Page Route (RPR) — R/W. Determines where to send the reserved page 

registers. These addresses are sent to PCI or LPC for the purpose of generating POST 

codes. The |/O addresses modified by this field are: 80h, 84h, 85h, 86h, 88h, 8Ch, 

8Dh, and 8Eh. 

0 = Writes will be forwarded to LPC, shadowed within the ICH, and reads will be 
returned from the internal shadow 

1 = Writes will be forwarded to PCI, shadowed within the ICH, and reads will be 
returned from the internal shadow. 

Note, if some writes are done to LPC/PCI to these I/O ranges, and then this bit is 

flipped, such that writes will now go to the other interface, the reads will not return 

what was last written. Shadowing is performed on each interface. 


The aliases for these registers, at 90h, 94h, 95h, 96h, 98h, 9Ch, 9Dh, and YEh, are 
always decoded to LPC. 


BIOS Interface Lock-Down (BILD) — R/WLO. 


0 = Disabled. 
1 = Prevents BUC.TS (offset 3414, bit 0) and GCS.BBS (offset 3410h, bits 11:10) 
from being changed. This bit can only be written from 0 to 1 once. 
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10.1.76 BUC—Backed Up Control Register 


Offset Address: 3414-3414h Attribute: R/W 
Default Value: 0000000xb Size: 8-bit 


All bits in this register are in the RTC well and only cleared by RTCRST# 


Reserved 


LAN Disable — R/W. 

0 = LAN is Enabled 

1 = LAN is Disabled. 

This bit is locked by the Function Disable SUS Well Lockdown register. Once locked 
this bit can not be changed by software. 


Daylight Savings Override (SDO) — R/W. 
0 = Daylight Savings is Enabled. 


1 = The DSE bit in RTC Register B is set to Read-only with a value of 0 to disable 
daylight savings. 


Reserved 


CPU BIST Enable (CBE) — R/W. This bit is in the resume well and is reset by 

RSMRST#, but not PLTRST# nor CF9h writes. 

0 = Disabled. 

1 = The INIT# signals will be driven active when CPURST# is active. INIT# and 
INIT3_3V# will go inactive with the same timings as the other processor 
interface signals (hold time after CPURST# inactive). 


Top Swap (TS) — R/W. 

0 = Intel® ICH9 will not invert A16. 

1 = 1CH9 will invert A16 for cycles going to the BIOS space (but not the feature 
space) in the FWH. 

If ICH is strapped for Top-Swap (GNT3# is low at rising edge of PWROK), then this bit 


cannot be cleared by software. The strap jumper should be removed and the system 
rebooted. 
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10.1.77 FD—Function Disable Register 


Offset Address: 3418-341Bh Attribute: R/W 
Default Value: See bit description Size: 32-bit 


The UHCI functions must be disabled from highest function number to lowest within 
each PCI device (Device 29 or Device 26). For example, if only two UHClIs are wanted 
on Device 29, software must disable UHCI #3 (UD3 bit set). When disabling UHCIs, the 
EHCI Structural Parameters Registers must be updated with coherent information in 
“Number of Companion Controllers” and “N_ Ports” fields. 


When disabling a function, only the configuration space is disabled. Software must 
ensure that all functionality within a controller that is not desired (such as memory 
spaces, I/O spaces, and DMA engines) is disabled prior to disabling the function. 


When a function is disabled, software must not attempt to re-enable it. A disabled 
function can only be re-enabled by a platform reset. 


a 


Serial ATA Disable 2 (SAD2) — R/W. Default is 0. 


0 = The SATA controller #2 (D31:F5) is enabled. 
1 = The SATA controller #2 (D31:F5) is disabled. 


pm Thermal Throttle Disable (TTD) — R/W. Default is 0. 
24 


0 = Thermal Throttle is enabled. 
1 = Thermal Throttle is disabled. 


PCI Express* 6 Disable (PE6D) — R/W. Default is 0. When disabled, the link for 
this port is put into the “link down” state. 


0 = PCI Express* port #6 is enabled. 

1 = PCI Express port #6 is disabled. 

PCI Express 5 Disable (PE5D) — R/W. Default is 0. When disabled, the link for this 
port is put into the link down state. 


0 = PCI Express port #5 is enabled. 
1 = PCI Express port #5 is disabled. 


PCI Express 3 Disable (PE3D) — R/W. Default is 0. When disabled, the link for this 
port is put into the link down state. 

0 = PCI Express port #3 is enabled. 

1 = PCI Express port #3 is disabled. 

NOTE: This bit must be set when Port 1 is configured as a x4. 


PCI Express 2 Disable (PE2D) — R/W. Default is 0. When disabled, the link for this 
port is put into the link down state. 

0 = PCI Express port #2 is enabled. 

1 = PCI Express port #2 is disabled. 

NOTE: This bit must be set when Port 1 is configured as a x4 or a x2. 





PCI Express 4 Disable (PE4D) — R/W. Default is 0. When disabled, the link for this 
port is put into the “link down” state. 
19 O = PCI Express port #4 is enabled. 
1 = PCI Express port #4 is disabled. 
NOTE: This bit must be set when Port 1 is configured as a x4. 
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PCI Express 1 Disable (PE1D) — R/W. Default is 0. When disabled, the link for this 
port is put into the link down state. 
0 = PCI Express port #1 is enabled. 
1 = PCI Express port #1 is disabled. 


EHCI #1 Disable (EHCI1D) — R/W. Default is 0. 


0 = The EHC! #1 is enabled. 
1 = The EHC! #1 is disabled. 


LPC Bridge Disable (LBD) — R/W. Default is 0. 


0 = The LPC bridge is enabled. 
1 = The LPC bridge is disabled. Unlike the other disables in this register, the following 
additional spaces will no longer be decoded by the LPC bridge: 

¢« +» Memory cycles below 16 MB (1000000h) 

¢« + 1/0 cycles below 64 KB (10000h) 

¢ + The Internal |/OxAPIC at FECO_0000 to FECF_FFFF 
Memory cycles in the LPC BIOS range below 4 GB will still be decoded when this bit is 
set, but the aliases at the top of 1 MB (the E and F segment) no longer will be 
decoded. 


EHCI #2 Disable (EHCI2D) — R/W. Default is 0. 


0 = The EHC! #2 is enabled. 
1 = The EHC! #2 is disabled. 


Note: When this bit is set, the UHCI #5 function is not available and the UHCI #4 
must be disabled by setting bit 11 in this register. 


UHCI #5 Disable (U5D) — R/W. Default is 0 


0 = The UHCI #5 is enabled. 
1 = The UHCI #5 is disabled. 


When the EHCI #2 Device Disable (EHCI2D) is set, this bit is a don’t care 


UHCI #4 Disable (U4D) — R/W. Default is 0. 


0 = The 4th UHCI (ports 6 and 7) is enabled. 
1 = The 4th UHCI (ports 6 and 7) is disabled. 


Note that UHCI #4 must be disabled when EHCI #2 is disabled with bit 13 in this 
register. 

UHCI #3 Disable (U3D) — R/W. Default is 0. 
0 = The 3rd UHCI (ports 4 and 5) is enabled. 
1 = The 3rd UHCI (ports 4 and 5) is disabled. 
UHCI #2 Disable (U2D) — R/W. Default is 0. 
0 = The 2nd UHCI (ports 2 and 3) is enabled. 
1 = The 2nd UHCI (ports 2 and 3) is disabled. 
UHCI #1 Disable (U1D) — R/W. Default is 0. 
0 = The 1st UHCI (ports 0 and 1) is enabled. 

1 = The 1st UHCI (ports 0 and 1) is disabled. 
UHCI #6 Disable (U6D) — R/W. Default is 0. 


0 = The 6th UHCI (ports 10 and 11) is enabled. 
1 = The 6th UHCI (ports 10 and 11) is disabled. 


Intel® High Definition Audio Disable (HDAD) — R/W. Default is 0. 
0 = The Intel High Definition Audio controller is enabled. 
1 = The Intel High Definition Audio controller is disabled and its PCI configuration 


space is not accessible. 
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SM Bus Disable (SD) — R/W. Default is 0. 

0 = The SM Bus controller is enabled. 

1 = The SM Bus controller is disabled. In |CH5 and previous, this also disabled the |/ 
O space. In ICH9, it only disables the configuration space. 


Serial ATA Disable 1 (SAD1) — R/W. Default is 0. 


0 = The SATA controller #1 (D31:F2) is enabled. 
1 = The SATA controller #1 (D31:F2) is disabled. 


Reserved 
BIOS must set this bit to 1b. 





10.1.78 CG—Clock Gating 


Offset Address: 341C-341Fh Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


Legacy (LPC) Dynamic Clock Gate Enable — R/W. 


0 = Legacy Dynamic Clock Gating is Disabled 
1 = Legacy Dynamic Clock Gating is Enabled 


USB UHCI Dynamic Clock Gate Enable — R/W. 


0 = USB UHCI Dynamic Clock Gating is Disabled 
1 = USB UHCI Dynamic Clock Gating is Enabled 


0 = Reserved 
1 = Reserved 
SATA Port 3 Dynamic Clock Gate Enable — R/W. 
(Desktop | 0 = SATA Port 3 Dynamic Clock Gating is Disabled 
Only) 1 = SATA Port 3 Dynamic Clock Gating is Enabled 


SATA Port 2 Dynamic Clock Gate Enable — R/W. 


(Desktop | 0 = SATA Port 2 Dynamic Clock Gating is Disabled 
Only) 1 = SATA Port 2 Dynamic Clock Gating is Enabled 


27:26 
(Mobile | Reserved 
Only) 
SATA Port 1 Dynamic Clock Gate Enable — R/W. 
0 = SATA Port 1 Dynamic Clock Gating is Disabled 
1 = SATA Port 1 Dynamic Clock Gating is Enabled 
SATA Port 0 Dynamic Clock Gate Enable — R/W. 
0 = SATA Port 0 Dynamic Clock Gating is Disabled 
1 = SATA Port 0 Dynamic Clock Gating is Enabled 
LAN Static Clock Gating Enable (LANSCGE) — R/W. 


0 = LAN Static Clock Gating is Disabled 
1 = LAN Static Clock Gating is Enabled when the LAN Disable bit is set in the Backed 
Up Control RTC register. 
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High Definition Audio Dynamic Clock Gate Enable — R/W. 
0 = High Definition Audio Dynamic Clock Gating is Disabled 
1 = High Definition Audio Dynamic Clock Gating is Enabled 
High Definition Audio Static Clock Gate Enable — R/W. 
0 = High Definition Audio Static Clock Gating is Disabled 

1 = High Definition Audio Static Clock Gating is Enabled 
USB EHCI Static Clock Gate Enable — R/W. 

0 = USB EHCI Static Clock Gating is Disabled 

1 = USB EHCI Static Clock Gating is Enabled 

USB EHCI Dynamic Clock Gate Enable — R/W. 

0 = USB EHC! Dynamic Clock Gating is Disabled 

1 = USB EHCI Dynamic Clock Gating is Enabled 

SATA Port 5 Dynamic Clock Gate Enable — R/W. 

0 = SATA Port 5 Dynamic Clock Gating is Disabled 

1 = SATA Port 5 Dynamic Clock Gating is Enabled 

SATA Port 4 Dynamic Clock Gate Enable — R/W. 

0 = SATA Port 4 Dynamic Clock Gating is Disabled 

1 = SATA Port 4 Dynamic Clock Gating is Enabled 


PCI Dynamic Gate Enable — R/W. 


0 = PCI Dynamic Gating is Disabled 
1 = PCI Dynamic Gating is Enabled 


Reserved 


SMBus Clock Gating Enable (SMBCGEN) — R/W. 


0 = SMBus Clock Gating is Disabled. 
1 = SMBus Clock Gating is Enabled. 


PCI Express* RX Clock Gating Enable (PRXCGEN) — R/W. 

0 = AFE RX Clock Gating is Disabled 

1 = AFE RX Clock Gating is Enabled whenever all PCle ports RX are in squelch 
DMI and PCI Express* RX Dynamic Clock Gate Enable — R/W. 

0 = DMI and PCI Express root port RX Dynamic Clock Gating is Disabled 
1 = DMI and PCI Express root port RX Dynamic Clock Gating is Enabled 
PCI Express TX Dynamic Clock Gate Enable — R/W. 

0 = PCI Express root port TX Dynamic Clock Gating is Disabled 

1 = PCI Express root port TX Dynamic Clock Gating is Enabled 

DMI TX Dynamic Clock Gate Enable — R/W. 

0 = DMI TX Dynamic Clock Gating is Disabled 

1 = DMI TX Dynamic Clock Gating is Enabled 

PCI Express Root Port Static Clock Gate Enable — R/W. 


0 = PCI Express root port Static Clock Gating is Disabled 
1 = PCI Express root port Static Clock Gating is Enabled 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 391 


| | ® 
| Nn tel ) Chipset Configuration Registers 


10.1.79 FDSW—Function Disable SUS Well 


Offset Address: 3420h Attribute: R/W 
Default Value: 00h Size: 8- bit 


as 


Function Disable SUS Well Lockdown (FDSWL)— R/W 
0 = FDSW registers are not locked down 


1 = FDSW registers are locked down 
NOTE: This bit must be set when Intel® Active Management Technology is enabled. 


peo [Reeves OC“~S~“—S*S*s‘“—*S*S™S~S~*™ 
10.1.80 CIR&8—Chipset I nitialization Register 8 


Offset Address: 3430-3433h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


ae 
CIR8 Field 1 — R/W. BIOS must program this field to 10b. 


10.1.81 CIR9—Chipset Initialization Register 9 


Offset Address: 350Ch-350Fh Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 


10.1.82 PPO - Port Power Off 


Offset Address: 3524-3525h Attribute: R/W 
Default Value: 0000h Size: 16-bit 


os 











This register can not be written when the USB Per-Port Registers Write Enable bit 


USB Port Power Off— R/W 

1 = The corresponding EHCI and UHCI ports are electrically disconnected in this 

mode. 

11:0 Warning: The platform must ensure that the powered off ports are not routed 

to any internal USB header or external USB connector. The |CH 

provides pull-down termination resistors. 
(UPRWC register, PMBASE + 3C, bit 1) is 0. 
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10.1.83 CIR10 - Chipset Initialization Register 10 


Offset Address: 352C-352Fh Attribute: R/W 
Default Value: 0008CO008h Size: 32-bit 


as 


32:18 | Reserved 


17:16 | CIR10O Field 1— R/W. BIOS must program this field to 11b. 
15:0 Reserved 





10.1.84 MAP - Remap Control Register 


Offset Address: 35F0O-35F3h Attribute: R/WO 
Default Value: 00000000h Size: 32-bit 


a 


UHCI Controller # 6 Remap — R/WO 

1 = UHCI Controller #6 is mapped to Device 29 Function 3 

0 = UHCI Controller #6 is mapped to Device 26 Function 2 

Note: When this bit is set, SW should reprogram the HCSPARAMS register 


(Section 17.2.1.3) to reflect the correct value for N_CC (bits 15:12) and N_Ports 
(bits 3:0) in each EHCI controller. 
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11 


sls Oe 


Note: 


PCI -to-PCI Bridge Registers 
(D30:FQ) 


The ICH9 PCI bridge resides in PCI Device 30, Function 0 on bus #0. This implements 
the buffering and control logic between PCI and the backbone. The arbitration for the 
PCI bus is handled by this PCI device. 


PCI Configuration Registers (D30:FO) 


Address locations that are not shown should be treated as Reserved (see Section 9.2 
for details). 


Table 11-1. PCI Bridge Register Address Map (PCI-PCI —D30:FO) (Sheet 1 of 2) 


Foriet [tenon | teaiternane [oat [Ton 
OOh-O1h [VID =| Vendor Identification 8086h | RO | 


02h-03h in Device Identification 
description 

04h-05h | PCICMD PCI Command 0000h R/W, RO 

O6h-07h | PSTS PCI Status 0010h R/WC, RO 


ooh | _A 


24h-27h PREF_MEM_BASE Prefetchable Memory Base and 00010001h R/W, RO 
_ LIMIT Limit 

28h-2Bh_ | PMBU32 ee Memory Papers2 00000000h R/W 

2Ch-2Fh_ | PMLU32 eel Memory Limit Upper | go900000h R/W 


34h CAPP Capability List Pointer 50h 
3Ch-3Dh |INTR Interrupt Information 0000h R/W, RO 


3Eh-3Fh Bridge Control 0000h ae 


40h-41h |SPDH Secondary PCI Device Hiding 0000h R/W, RO 
44h-47h Delayed Transaction Control 00000000h R/W 
48h-4Bh Bridge Proprietary Status 00000000h_ | R/WC, RO 
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Table 11-1. PCI Bridge Register Address Map (PCI-PCI—D30:FO) (Sheet 2 of 2) 


[oreet | wrenene [neatiernane [pete [ne 
|4Ch-4Fh | 4Fh [BPC 8s Bridge Policy Configuration 00001200h R/W RO 


11.1.1 


11.1.2 


396 


50-51h SVCAP re ee Vendor Capability 000Dh pro | 
Pointer 


54h-57h |SVID | Subsystem Vendor IDs 00000000 


VI D— Vendor Identification Register (PCI -PCl —D30:FO) 


Offset Address: OOh-O1h Attribute: RO 
Default Value: 8086h Size: 16 bits 


oe 
Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h. 


DI D— Device Identification Register (PCI-PCIl —D30:FO) 


Offset Address: O2h-O03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


a 


Device I D — RO. This is a 16-bit value assigned to the PCI bridge. Refer to the Intel® 








1/O Controller Hub (ICH9) Family Specification Update for the value of the Device ID 
Register. 
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11.1.3 


11.1.4 


Note: 


PCI CMD—PCI Command (PCI -PCI —D30:FO) 


Offset Address: O4h-05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


Le 
15:11 | Reserved 


1 Interrupt Disable (ID) — RO. Hardwired to 0. The PCI bridge has no interrupts to 
disable 


Fast Back to Back Enable (FBE) — RO. Hardwired to 0, per the PCI Express* Base 
Specification, Revision 1.0a. 


SERR# Enable (SERR_EN) — R/W. 

0 = Disable. 

1 = Enable the ICH9 to generate an NMI (or SMI# if NMI routed to SMI#) when the 
D30:FO SSE bit (offset 06h, bit 14) is set. 


Wait Cycle Control (WCC) — RO. Hardwired to 0, per the PCI Express* Base 
Specification, Revision 1.0a. 


Parity Error Response (PER) — R/W. 

0 = The ICH9 ignores parity errors on the PCI bridge. 

1 = The ICH9 will set the SSE bit (D30:FO, offset 06h, bit 14) when parity errors are 
detected on the PCI bridge. 


Memory Write and Invalidate Enable (MWE) — RO. Hardwired to 0, per the PCI 
Express* Base Specification, Revision 1.0a 


Special Cycle Enable (SCE) — RO. Hardwired to 0, per the PCI Express* Base 
Specification, Revision 1.0a and the PCI- to-PCI Bridge Specification. 


Bus Master Enable (BME) — R/W. 


0 = Disable 
1 = Enable. Allows the PCI-to-PCI bridge to accept cycles from PCI. 


Memory Space Enable (MSE) — R/W. Controls the response as a target for memory 
cycles targeting PCI. 

0 = Disable 

1 = Enable 


1/ O Space Enable (1OSE) — R/W. Controls the response as a target for I/O cycles 
targeting PCI. 


0 = Disable 
1 = Enable 


0 
7 
5 
3 
2 
1 


VGA Palette Snoop (VPS) — RO. Hardwired to 0, per the PCI Express* Base 
Specification, Revision 1.0a. 





PSTS—PCI Status Register (PCI -PCl —D30:FO) 


Offset Address: O6h-07h Attribute: R/WC, RO 
Default Value: 0010h Size: 16 bits 


For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 
the bit has no effect. 
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Detected Parity Error (DPE) — R/WC. 

0 = Parity error Not detected. 

1 = Indicates that the |CH9 detected a parity error on the internal backbone. This bit 
gets set even if the Parity Error Response bit (D30:F0:04 bit 6) is not set. 


Signaled System Error (SSE) — R/WC. Several internal and external sources of the 
bridge can cause SERR#. The first class of errors is parity errors related to the 
backbone. The PCI bridge captures generic data parity errors (errors it finds on the 
backbone) as well as errors returned on backbone cycles where the bridge was the 
master. If either of these two conditions is met, and the primary side of the bridge is 
enabled for parity error response, SERR# will be captured as shown below. 


CuD.PERE Backbone Parity 
Error 

PSTS DPE 

PSTS DPD 


As with the backbone, the PCI bus captures the same sets of errors. The PCI bridge 
captures generic data parity errors (errors it finds on PCI) as well as errors returned on 
PCI cycles where the bridge was the master. If either of these two conditions is met, 
and the secondary side of the bridge is enabled for parity error response, SERR# will be 
captured as shown below. 








BCTRLPERE 


BCTRL.SEE P Cl Parity Error 
SSTS.DPE 
SSTS.DPD 


The final class of errors is system bus errors. There are three status bits associated with 
system bus errors, each with a corresponding enable. The diagram capturing this is 
shown below. 





Posted Write Master Aborts 
BCTRL.MAM 


BCTRL.OTS 


BCTRL.OTE Secondary Bus System 
SSTS.RTA frors 


BPC.RTAE 


BCTRLSEE 
SSTS.RSE 





After checking for the three above classes of errors, an SERR# is generated, and 
PSTS.SSE logs the generation of SERR#, if CMD.SEE (D30:F0:04, bit 8) is set, as shown 


below. 
Backbone Party Error PSTS.SSE 
PCI Panty Eror 
Secondary Bus $ ystem Errors 
SERR# 
CMD.SEE 


Received Master Abort (RMA) — R/WC. 


0 = No master abort received. 
1 = Set when the bridge receives a master abort status from the backbone. 
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11.1.5 


11.1.6 


Peete 


Received Target Abort (RTA) — R/WC. 


0 = No target abort received. 
1 = Set when the bridge receives a target abort status from the backbone. 


Signaled Target Abort (STA) — R/WC. 
11 0 = No signaled target abort 
1 = Set when the bridge generates a completion packet with target abort status on the 


backbone. 


Reserved. 


previous request, and detects a parity error, and CMD.PERE is set (D30:FO0: 04 bit 
6). 


Capabilities List (CLIST) — RO. Hardwired to 1. Capability list exist on the PCI 


Data Parity Error Detected (DPD) — R/WC. 
0 = Data parity error Not detected. 
1 = Set when the bridge receives a completion packet from the backbone from a 


Interrupt Status (1S) — RO. Hardwired to 0. The PCI bridge does not generate 
interrupts. 


RI D—Revision I dentification Register (PCI -PCl —D30:FO) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


Es rr a 


Revision ID — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family Specification 





Update for the value of the Revision ID Register 





CC—Class Code Register (PCI -PCIl —D30:FO) 


Offset Address: O9h-OBh Attribute: RO 
Default Value: 060401h Size: 24 bits 


a 


23:16 | Base Class Code (BCC) — RO. Hardwired to O6h. Indicates this is a bridge device. 


15:8 Sub Class Code (SCC) — RO. Hardwired to 04h. Indicates this device is a PCI-to-PCl 
: bridge. 

7:0 Programming Interface (PI) — RO. Hardwired to O1h. Indicates the bridge is 
‘ subtractive decode 
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11.1.7 PMLT—Primary Master Latency Timer Register 


(PCI-PCl —D30:FO) 
Offset Address: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


| Bit | Description 


Master Latency Timer Count (MLTC) — RO. Reserved per the PCI Express* Base 


Specification, Revision 1.0a. 


2:0 Reserved 





11.1.8 HEADTYP—Header Type Register (PCI-PCl —D30:FO) 


Offset Address: OEh Attribute: RO 
Default Value: Olh Size: 8 bits 


Multi-Function Device (MFD) — RO. ‘0’ indicates a single function device 


Header Type (HTYPE) — RO. This 7-bit field identifies the header layout of the 
configuration space, which is a PCI-to-PCI bridge in this case. 





11.1.9 BNUM—Bus Number Register (PCI-PCIl —D30:F0O) 


Offset Address: 18h-1Ah Attribute: R/W 
Default Value: 000000h Size: 24 bits 


. Subordinate Bus Number (SBBN) — R/W. Indicates the highest PCI bus number 
, below the bridge. 


15:8 | Secondary Bus Number (SCBN) — R/W. Indicates the bus number of PCI 


Primary Bus Number (PBN) — R/W. This field is default to OOh. In a multiple-lCH 
system, programmable PBN allows an ICH to be located on any bus. System 
configuration software is responsible for initializing these registers to appropriate 
values. PBN is not used by hardware in determining its bus number. 
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11.1.10 SMLT—Secondary Master Latency Timer Register 


(PCI -PCl —D30:FO) 
Offset Address: 1Bh Attribute: R/W 
Default Value: 00h Size: 8 bits 


This timer controls the amount of time the ICH9 PCI-to-PCI bridge will burst data on its 
secondary interface. The counter starts counting down from the assertion of FRAME#. 
If the grant is removed, then the expiration of this counter will result in the de- 
assertion of FRAME#. If the grant has not been removed, then the ICH9 PCI-to-PCl 
bridge may continue ownership of the bus. 


Pe etn 


Master Latency Timer Count (MLTC) — R/W. This 5-bit field indicates the number of 


PCI clocks, in 8-clock increments, that the |CH9 remains as master of the bus. 


11.1.11 IOBASE_LIMIT—I/O Base and Limit Register 





(PCI -PCI —D30:FO) 
Offset Address: 1Ch-1Dh Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


1/ O Limit Address Limit bits[15:12] — R/W. I/O Base bits corresponding to address 
lines 15:12 for 4-KB alignment. Bits 11:0 are assumed to be padded to FFFh. 


1/ O Limit Address Capability (I OLC) — RO. Indicates that the bridge does not 


support 32-bit |/O addressing. 


1/ O Base Address (Il OBA) — R/W. |/O Base bits corresponding to address lines 15:12 
for 4-KB alignment. Bits 11:0 are assumed to be padded to 000h. 


1/ O Base Address Capability (IOBC) — RO. Indicates that the bridge does not 
support 32-bit |/O addressing. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 401 


] ® 
| Nn tel PCI-to-PCI Bridge Registers (D30:FO) 


11.1.12 SECSTS—Secondary Status Register (PCI-PCIl —D30:FO) 


Offset Address: 1Eh-1Fh Attribute: R/WC, RO 
Default Value: 0280h Size: 16 bits 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


a 


Detected Parity Error (DPE) — R/WC. 


0 = Parity error not detected. 
1 = Intel® 1CH9 PCI bridge detected an address or data parity error on the PCI bus 


Received System Error (RSE) — R/WC. 


O = SERR# assertion not received 
1 = SERR# assertion is received on PCI. 


Received Master Abort (RMA) — R/WC. 

0 = No master abort. 

1 = This bit is set whenever the bridge is acting as an initiator on the PCI bus and the 
cycle is master-aborted. For (G)MCH/ICH9 interface packets that have completion 
required, this must also cause a target abort to be returned and sets PSTS.STA. 
(D30:F0:06 bit 11) 


Received Target Abort (RTA) — R/WC. 

0 = No target abort. 

1 = This bit is set whenever the bridge is acting as an initiator on PCI and a cycle is 
target-aborted on PCI. For (G)MCH/ICH9 interface packets that have completion 
required, this event must also cause a target abort to be returned, and sets 
PSTS.STA. (D30:F0:06 bit 11). 


Signaled Target Abort (STA) — R/WC. 


0 = No target abort. 
1 = This bit is set when the bridge is acting as a target on the PCI Bus and signals a 
target abort. 


DEVSEL# Timing (DEVT) — RO. 
01h = Medium decode timing. 


Data Parity Error Detected (DPD) — R/WC. 

0 = Conditions described below not met. 

1 = The ICH9 sets this bit when all of the following three conditions are met: 
¢ The bridge is the initiator on PCI. 
¢ PERR# is detected asserted or a parity error is detected internally 
¢ BCTRL.PERE (D30:F0:3E bit 0) is set. 


Fast Back to Back Capable (FBC) — RO. Hardwired to 1 to indicate that the PCI to PCI 


10:9 


target logic is capable of receiving fast back-to-back cycles. 


Reserved 


66 MHz Capable (66MHZ_CAP) — RO. Hardwired to 0. This bridge is 33 MHz capable 





Reserved 
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11.1.13 


11.1.14 


MEMBASE_LIMIT—Memory Base and Limit Register 
(PCI -PCl —D30:FO) 


Offset Address: 20h-23h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register defines the base and limit, aligned to a 1-MB boundary, of the non- 
prefetchable memory area of the bridge. Accesses that are within the ranges specified 
in this register will be sent to PCI if CMD.MSE is set. Accesses from PCI that are outside 
the ranges specified will be accepted by the bridge if CMD.BME is set. 


eS rr. 


Memory Limit (ML) — R/W. These bits are compared with bits 31:20 of the incoming 
31:20 | address to determine the upper 1-MB aligned value (exclusive) of the range. The 
incoming address must be less than this value. 


Memory Base (MB) — R/W. These bits are compared with bits 31:20 of the incoming 
15:4 | address to determine the lower 1-MB aligned value (inclusive) of the range. The 
incoming address must be greater than or equal to this value. 


PREF_MEM_BASE_LIMIT—Prefetchable Memory Base 
and Limit Register (PCI -PCl —D30:FO) 


Offset Address: 24h-27h Attribute: R/W, RO 
Default Value: 00010001h Size: 32-bit 





Defines the base and limit, aligned to a 1-MB boundary, of the prefetchable memory 
area of the bridge. Accesses that are within the ranges specified in this register will be 
sent to PCI if CMD.MSE is set. Accesses from PCI that are outside the ranges specified 
will be accepted by the bridge if CMD.BME is set. 


Pe scion 


Prefetchable Memory Limit (PML) — R/W. These bits are compared with bits 31:20 
31:20 | of the incoming address to determine the upper 1-MB aligned value (exclusive) of the 
range. The incoming address must be less than this value. 


64-bit Indicator (164L) — RO. Indicates support for 64-bit addressing. 


Prefetchable Memory Base (PMB) — R/W. These bits are compared with bits 31:20 
15:4 | of the incoming address to determine the lower 1-MB aligned value (inclusive) of the 
range. The incoming address must be greater than or equal to this value. 


64-bit Indicator (164B) — RO. Indicates support for 64-bit addressing. 
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11.1.15 PMBU32—Prefetchable Memory Base Upper 32 Bits 
Register (PCI -PCl —D30:FO) 


Offset Address: 28h-2Bh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


| Bit | Description 





. Prefetchable Memory Base Upper Portion (PMBU) — R/W. Upper 32-bits of the 
31:0 
prefetchable address base. 


11.1.16 PMLU32—Prefetchable Memory Limit Upper 32 Bits 
Register (PCI -PCl —D30:FO) 


Offset Address: 2C-2Fh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


a 


Prefetchable Memory Limit Upper Portion (PMLU) — R/W. Upper 32-bits of the 
prefetchable address limit. 





11.1.17 CAPP—Capability List Pointer Register (PCI-PCl —D30:FO) 


Offset Address: 34h Attribute: RO 
Default Value: 50h Size: 8 bits 


Capabilities Pointer (PTR) — RO. Indicates that the pointer for the first entry in the 
capabilities list is at 50h in configuration space. 





11.1.18 INTR—Interrupt Information Register (PCI -PCIl—D30:FO) 


Offset Address: 3Ch-3Dh Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


oe 
Interrupt Pin (IPIN) — RO. The PCI bridge does not assert an interrupt. 


Since the bridge does not generate an interrupt, BIOS should program this value to FFh 
as per the PCI bridge specification. 





Interrupt Line (ILINE) — R/W. Software written value to indicate which interrupt line 
7:0 (vector) the interrupt is connected to. No hardware action is taken on this register. 
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11.1.19 BCTRL—Bridge Control Register (PCI -PCl —D30:FO) 


Offset Address: 3Eh-3Fh Attribute: R/WC, RO, R/W 
Default Value: 0000h Size: 16 bits 


Pet 


5:12 | Reserved 


Discard Timer SERR# Enable (DTE) — R/W. Controls the generation of SERR# on 
the primary interface in response to the DTS bit being set: 

0 = Do not generate SERR# on a secondary timer discard 

1 = Generate SERR# in response to a secondary timer discard 


Discard Timer Status (DTS) — R/WC. This bit is set to 1 when the secondary discard 
timer (see the SDT bit below) expires for a delayed transaction in the hard state. 


Secondary Discard Timer (SDT) — R/W. This bit sets the maximum number of PCI 
clock cycles that the Intel® 1CH9 waits for an initiator on PCI to repeat a delayed 
transaction request. The counter starts once the delayed transaction data is has been 
returned by the system and is in a buffer in the |CH9 PCI bridge. If the master has not 
repeated the transaction at least once before the counter expires, the ICH9 PCI bridge 
discards the transaction from its queue. 


0 = The PCI master timeout value is between 2!5 and 22° PCI clocks 
1 = The PCI master timeout value is between 22° and 2?! PCI clocks 


Primary Discard Timer (PDT) — R/W. This bit is R/W for software compatibility only. 


Fast Back to Back Enable (FBE) — RO. Hardwired to 0. The PCI logic will not generate 
fast back-to-back cycles on the PCI bus. 


0 = Bridge de-asserts PCIRST# 

1 = Bridge asserts PCIRST#. When PCIRST# is asserted, the delayed transaction 
buffers, posting buffers, and the PCI bus are initialized back to reset conditions. 
The rest of the part and the configuration registers are not affected. 


11 
10 
7 
Master Abort Mode (MAM) — R/W. Controls the I|CH9 PCI bridge’s behavior when a 
master abort occurs: 
Master Abort on (G)MCH/ICH9 Interconnect (DMI): 
0 = Bridge asserts TRDY# on PCI. It drives all 1s for reads, and discards data on writes. 
1 = Bridge returns a target abort on PCI. 
5 
Master Abort PCI (non-locked cycles): 


0 = Normal completion status will be returned on the (G)MCH/ICH9 interconnect. 
1 = Target abort completion status will be returned on the (G)MCH/ICH9 interconnect. 


NOTE: All locked reads will return a completer abort completion status on the (G)MCH/ 
ICH9 interconnect. 


VGA 16-Bit Decode (V16D) — R/W. Enables the ICH9 PCI bridge to provide 16-bits 
decoding of VGA I/O address precluding the decode of VGA alias addresses every 1 KB. 
This bit requires the VGAE bit in this register be set. 


Ae Secondary Bus Reset (SBR) — R/W. Controls PCIRST# assertion on PCI. 
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VGA Enable (VGAE) — R/W. When set to a 1, the ICH9 PCI bridge forwards the 
following transactions to PCI regardless of the value of the I/O base and limit registers. 
The transactions are qualified by CMD.MSE (D30:F0:04 bit 1) and CMD.IOSE 
(D30:F0:04 bit 0) being set. 

¢ Memory addresses: 0O00A0000h- OOOBFFFFh 


¢ |/O addresses: 3BOh-3BBh and 3COh-3DFh. For the I/O addresses, bits [63:16] of the address 
must be 0, and bits [15:10] of the address are ignored (i.e., aliased). 


The same holds true from secondary accesses to the primary interface in reverse. That 
is, when the bit is 0, memory and I/O addresses on the secondary interface between 
the above ranges will be claimed. 


ISA Enable (IE) — R/W. This bit only applies to |/O addresses that are enabled by the 
1/O Base and I/O Limit registers and are in the first 64 KB of PCI I/O space. If this bit is 
set, the |CH9 PCI bridge will block any forwarding from primary to secondary of I/O 
transactions addressing the last 768 bytes in each 1-KB block (offsets 100h to 3FFh). 


SERR# Enable (SEE) — R/W. Controls the forwarding of secondary interface SERR# 
assertions on the primary interface. When set, the PCI bridge will forward SERR# pin. 
¢ SERR# is asserted on the secondary interface. 
¢ This bit is set. 
* CMD.SEE (D30:F0:04 bit 8) is set. 


Parity Error Response Enable (PERE) — R/W. 
0 = Disable 


1 = The ICH9 PCI bridge is enabled for parity error reporting based on parity errors on 
the PCI bus. 





11.1.20 SPDH—Secondary PCI Device Hiding Register 
(PCI -PCl —D30:FO) 


Offset Address: 40h-41h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


This register allows software to hide the PCI devices, either plugged into slots or on the 
motherboard. 


Hide Device 3 (HD3) — R/W, RO. Same as bit 0 of this register, except for device 3 
(AD[19]) 
Hide Device 2 (HD2) — R/W, RO. Same as bit 0 of this register, except for device 2 
(AD[18]) 


Hide Device 1 (HD1) — R/W, RO. Same as bit 0 of this register, except for device 1 


Hide Device 0 (HDO) — R/W, RO. 


0 = The PCI configuration cycles for this slot are not affected. 

1 = Intel® 1CH9 hides device 0 on the PCI bus. This is done by masking the IDSEL 
(keeping it low) for configuration cycles to that device. Since the device will not see 
its IDSEL go active, it will not respond to PCI configuration cycles and the 
processor will think the device is not present. AD[16] is used as IDSEL for device 0. 
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11.1.21 DTC—Delayed Transaction Control Register 


(PCI-PCl —D30:FO) 
Offset Address: 44h-47h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Discard Delayed Transactions (DDT) — R/W. 

0 = Logged delayed transactions are kept. 

1 = The ICH9 PCI bridge will discard any delayed transactions it has logged. This 
includes transactions in the pending queue, and any transactions in the active 
queue, whether in the hard or soft DT state. The prefetchers will be disabled and 
return to an idle state. 


NOTES:|f a transaction is running on PCI at the time this bit is set, that transaction will 
continue until either the PCI master disconnects (by de-asserting FRAME#) or 
the PCI bridge disconnects (by asserting STOP#). This bit is cleared by the PCI 
bridge when the delayed transaction queues are empty and have returned to an 
idle state. Software sets this bit and polls for its completion 


Block Delayed Transactions (BDT) — R/W. 

0 = Delayed transactions accepted 

1 = The ICH9 PCI bridge will not accept incoming transactions which will result in 
delayed transactions. It will blindly retry these cycles by asserting STOP#. All 
postable cycles (memory writes) will still be accepted. 


Maximum Delayed Transactions (MDT) — R/W. Controls the maximum number of 
delayed transactions that the |CH9 PCI bridge will run. Encodings are: 


Auto Flush After Disconnect Enable (AFADE) — R/W. 

0 = The PCI bridge will retain any fetched data until required to discard by producer/ 
consumer rules. 

1 = The PCI bridge will flush any prefetched data after either the PCI master (by de- 
asserting FRAME#) or the PCI bridge (by asserting STOP#) disconnects the PCI 
transfer. 


Never Prefetch (NP) — R/W. 

0 = Prefetch enabled 

1 = The ICH9 will only fetch a single DW and will not enable prefetching, regardless of 
the command being an Memory read (MR), Memory read line (MRL), or Memory 
read multiple (MRM). 
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Memory Read Multiple Prefetch Disable (MRMPD) — R/W. 


0 = MRM commands will fetch multiple cache lines as defined by the prefetch 
algorithm. 

1 = Memory read multiple (MRM) commands will fetch only up to a single, 64-byte 
aligned cache line. 


Memory Read Line Prefetch Disable (MRLPD) — R/W. 


0 = MRL commands will fetch multiple cache lines as defined by the prefetch algorithm. 
1 = Memory read line (MRL) commands will fetch only up to a single, 64-byte aligned 
cache line. 


Memory Read Prefetch Disable (MRPD) — R/W. 


0 = MR commands will fetch up to a 64-byte aligned cache line. 
1 = Memory read (MR) commands will fetch only a single DW. 





11.1.22 BPS—Bridge Proprietary Status Register 
(PCI-PCI —D30:FO) 


Offset Address: 48h-4Bh Attribute: R/WC, RO 
Default Value: 00000000h Size: 32 bits 


Pe cine 


PERR# Assertion Detected (PAD) — R/WC. This bit is set by hardware whenever the 
PERR# pin is asserted on the rising edge of PCI clock. This includes cases in which the 
chipset is the agent driving PERR#. It remains asserted until cleared by software 
writing a 1 to this location. When enabled by the PERR#-to-SERR# Enable bit (in the 
Bridge Policy Configuration register), a 1 in this bit can generate an internal SERR# and 
be a source for the NMI logic. 


This bit can be used by software to determine the source of a system problem. 


a 


Number of Pending Transactions (NPT) — RO. This read-only indicator tells debug 
software how many transactions are in the pending queue. Possible values are: 


000 = No pending transaction 
001 = 1 pending transaction 


010 = 2 pending transactions 
011 = 3 pending transactions 
100 = 4 pending transactions 
101 = 5 pending transactions 
110 - 111 = Reserved 


NOTE: This field is not valid if DTC.MDT (offset 44h: bits 7:6) is any value other than 
‘00’. 


Number of Active Transactions (NAT) — RO. This read-only indicator tells debug 
software how many transactions are in the active queue. Possible values are: 


00 = No active transactions 
01 = 1 active transaction 
10 = 2 active transactions 
11 = Reserved 
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11.1.23 BPC—Bridge Policy Configuration Register 


(PCI -PCl —D30:FO) 
Offset Address: 4Ch-4Fh Attribute: R/W 
Default Value: | 00001200h Size: 32 bits 


7 
31:14 | Reserved 


Upstream Read Latency Threshold (URLT) — R/W: This field specifies the number 
of PCI clocks after internally enqueuing an upstream memory read request at which 
point the PCI target logic should insert wait states in order to optimize lead-off latency. 
When the master returns after this threshold has been reached and data has not 
arrived in the Delayed Transaction completion queue, then the PCI target logic will 
insert wait states instead of immediately retrying the cycle. The PCI target logic will 
insert up to 16 clocks of target initial latency (from FRAME# assertion to TRDY# or 
STOP# assertion) before retrying the PCI read cycle (if the read data has not arrived 
yet). 

Note that the starting event for this Read Latency Timer is not explicitly visible 
externally. 

A value of Oh disables this policy completely such that wait states will never be inserted 
on the read lead-off data phase. 

The default value (12h) specifies 18 PCI clocks (540 ns) and is approximately 4 clocks 
less than the typical idle lead-off latency expected for desktop ICH9 systems. This value 
may need to be changed by BIOS, depending on the platform. 


Subtractive Decode Policy (SDP) — R/W. 

0 = The PCI bridge always forwards memory and I/O cycles that are not claimed by any 
other device on the backbone (primary interface) to the PCI bus (secondary 
interface). 

1 = The PCI bridge will not claim and forward memory or I/O cycles at all unless the 
corresponding Space Enable bit is set in the Command register. 

NOTE: The Boot BIOS Destination Selection strap can force the BIOS accesses to PCI. 

7 


CMD.MSE BPC.SDP Range Forwarding Policy 


Forward unclaimed 


0 Don’t Care 
cycles 


1 Don’t Care Forwarding Prohibited 


Positive decode and 


Within range forward 


Gutside Subtractive decode & 
forward 
PERR#-to-SERR# Enable (PSE) — R/W. When this bit is set, a 1 in the PERR# 
Assertion status bit (in the Bridge Proprietary Status register) will result in an internal 
SERR# assertion on the primary side of the bridge (if also enabled by the SERR# 
Enable bit in the primary Command register). SERR# is a source of NMI. 


Secondary Discard Timer Testmode (SDTT) — R/W. 


0 = The secondary discard timer expiration will be defined in BCTRL.SDT (D30:FO0:3E, 
bit 9) 
1 = The secondary discard timer will expire after 128 PCI clocks. 


Reserved 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 409 


| ® 
l n tel ) PCI-to-PCI Bridge Registers (D30:FO) 


11.1.24 


11.1.25 


410 


Pet 


Peer Decode Enable (PDE) — R/W. 


0 = The PCI bridge assumes that all memory cycles target main memory, and all |/O 
cycles are not claimed. 
1 = The PCI bridge will perform peer decode on any memory or I/O cycle from PCI that 


falls outside of the memory and I/O window registers 


Received Target Abort SERR# Enable (RTAE) — R/W. When set, the PCI bridge will 
report SERR# when PSTS.RTA (D30:F0:06 bit 12) or SSTS.RTA (D30:FO0:1E bit 12) are 
set, and CMD.SEE (D30:F0:04 bit 8) is set. 





SVCAP—Subsystem Vendor Capability Register 
(PCI -PCl —D30:FO) 


Offset Address: 50h-51h Attribute: RO 
Default Value: 000Dh Size: 16 bits 


a 


Next Capability (NEXT) — RO. Value of 00h indicates this is the last item in the list. 


Capability | dentifier (CID) — RO. Value of ODh indicates this is a PCI bridge 
subsystem vendor capability. 





SVI D—Subsystem Vendor IDs Register (PCI -PCIl —D30:F0O) 


Offset Address: 54h-57h Attribute: R/WO 
Default Value: 00000000h Size: 32 bits 


Subsystem Identifier (SID) — R/WO. Indicates the subsystem as identified by the 
vendor. This field is write once and is locked down until a bridge reset occurs (not the 
PCI bus reset). 


Subsystem Vendor Identifier (SVID) — R/WO. Indicates the manufacturer of the 
subsystem. This field is write once and is locked down until a bridge reset occurs (not 
the PCI bus reset). 





§§ 
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12.1 


Note: 


Gigabit LAN Configuration 
Registers 


Gigabit LAN Configuration Registers 
(Gigabit LAN — D25:F0O) 


Register address locations that are not shown in Table 12-1 should be treated as 
Reserved. 


Table 12-1. Gigabit LAN Configuration Registers Address Map 


(Gigabit LAN —D25:FO) (Sheet 1 of 2) 


Register Name 


C 


F ae See register 


0 


Revision | dentification BEE register 
description 


ID 
Cc Class Code 020000h 
LS 
LT 
ID 


8 
09h-OBh 
0c 


R/W 


" PRI 
OEh HEADTYP _ | Header Type 
S 
h 
Eh 


10h-13h MBARA Memory Base Address A 00000000h R/W, RO 
14h-17h MBARB Memory Base Address B 00000000h R/W, RO 
18h-1Bh MBARC Memory Base Address C 00000001h R/W, RO 


See register 
See register 

2Eh- 2Fh SVID Subsystem Vendor ID 
i See register 

30h- 33h ERBA Expansion ROM Base Address 


34 CAPP Capabilities List Pointer 


3Ch-3Dh INTR Interrupt Information ace Pegister R/W, RO 
description 
Maximum Latency/Minimum 


C8h-C9h CLIST1 Capabilities List 1 DOO1h RO, R/WO 
PCI Power Management See register 
PCI Power Management Control See register R/WC, R/W, 


3 
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Table 12-1. Gigabit LAN Configuration Registers Address Map 
(Gigabit LAN —D25:FO) (Sheet 2 of 2) 


[am [ose mae | 


DOh-D1ih CLIST2 Capabilities List 2 E005h R/WO, RO 
D2h-D3h MCTL Message Control 0080h 


D4h-D7h MADDL __| Message Address Low mee Te aieter R/ 
description 

D8h-DBh MADDH Message Address High mee Te OiSter R/ 
description 

DCh-DDh MDAT Message Data See register R/W 
description 

EOh-Elh FLRCAP Function Level Reset Capability 0009h | = RO 

E2h-E3h FLRCLV Function Level Reset Capability See register R/WO, RO 

Length and Value description 


12.1.1 ViD—Vendor Identification Register 
(Gigabit LAN—D25:F0) 


Address Offset: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16 bits 


a 


Vendor ID — RO. This is a 16-bit value assigned to Intel. The field may be auto-loaded 
from the NVM at address OEh during init time depending on the "Load Vendor/Device 
ID" bit field in NVM word OAh with a default value of 8086h. 


WwW 
W 








12.1.2 DI D—Device Identification Register 
(Gigabit LAN—D25:F0) 


Address Offset: O2h-03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


a 


Device ID — RO. This is a 16-bit value assigned to the Intel® 1CH9 Gigabit LAN 


controller. The field may be auto-loaded from the NVM word ODh during initialization 
time depending on the "Load Vendor/Device ID" bit field in NVM word OAh. 
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12.1.3 


PCI CMD—PCI Command Register 
(Gigabit LAN—D25:F0) 


Address Offset: O4h-O05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


rrr ae 


5:11 | Reserved 
Interrupt Disable — R/W. This disables pin-based INTx# interrupts on enabled Hot- 
Plug and power management events. This bit has no effect on MSI operation. 


0 = Internal INTx# messages are generated if there is an interrupt for Hot-Plug or 
power management and MSI is not enabled. 
1 = Internal INTx# messages will not be generated. 


This bit does not affect interrupt forwarding from devices connected to the root port. 
Assert_INTx and Deassert_INTx messages will still be forwarded to the internal 
interrupt controllers if this bit is set. 


Fast Back to Back Enable (FBE) — RO. Hardwired to ‘0’. 


SERR# Enable (SEE) — R/W. 


0 = Disable 
1 = Enables the Gb LAN controller to generate an SERR# message when PSTS.SSE is 
set. 


Wait Cycle Control (WCC) — RO. Hardwired to ‘0’. 


Parity Error Response (PER) — R/W. 

0 = Disable. 

1 = Indicates that the device is capable of reporting parity errors as a master on the 
backbone: 

| 5 | Palette Snoop Enable (PSE) — RO. Hardwired to ‘0’. 

| 4 | Postable Memory Write Enable (PMWE) — RO. Hardwired to ‘0’. 


Special Cycle Enable (SCE) — RO. Hardwired to ‘0’. 


Bus Master Enable (BME) — R/W. 

0 = Disable. All cycles from the device are master aborted 

1 = Enable. Allows the root port to forward cycles onto the backbone from a Gigabit 
LAN* device. 


Memory Space Enable (MSE) — R/W. 


0 = Disable. Memory cycles within the range specified by the memory base and limit 
registers are master aborted on the backbone. 

1 = Enable. Allows memory cycles within the range specified by the memory base and 
limit registers can be forwarded to the Gigabit LAN device. 


10 
7 
5 
4 
3 
2 
1 


1/ O Space Enable (1OSE) — R/W. This bit controls access to the I/O space registers. 

0 = Disable. I/O cycles within the range specified by the I/O base and limit registers 
are master aborted on the backbone. 

1 = Enable. Allows I/O cycles within the range specified by the I/O base and limit 
registers can be forwarded to the Gigabit LAN device. 
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12.1.4 PCISTS—PCI Status Register 
(Gigabit LAN—D25:F0) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: 0010h Size: 16 bits 


a 


Detected Parity Error (DPE) — R/WC. 

0 = No parity error detected. 

1 = Set when the Gb LAN controller receives a command or data from the backbone 
with a parity error. This is set even if PCIMD.PER (D25:FO, bit 6) is not set. 

Signaled System Error (SSE) — R/WC. 

0 = No system error signaled. 

1 = Set when the Gb LAN controller signals a system error to the internal SERR# logic. 

Received Master Abort (RMA) — R/WC. 


0 = Root port has not received a completion with unsupported request status from the 
backbone. 

1 = Set when the Gb LAN controller receives a completion with unsupported request 
status from the backbone. 


Received Target Abort (RTA) — R/WC. 

0 = Root port has not received a completion with completer abort from the backbone. 

1 = Set when the Gb LAN controller receives a completion with completer abort from 
the backbone. 

Signaled Target Abort (STA) — R/WC. 


0 = No target abort received. 
1 = Set whenever the Gb LAN controller forwards a target abort received from the 
downstream device onto the backbone. 


0 = No data parity error received. 
1 = Set when the Gb LAN Controller receives a completion with a data parity error on 
the backbone and PCIMD.PER (D25:F0, bit 6) is set. 


Fast Back to Back Capable (FB2BC) — RO. Hardwired to ‘0’. 
Reserved 
66 MHz Capable — RO. Hardwired to ‘0’. 


Capabilities List — RO. Hardwired to ‘1’. Indicates the presence of a capabilities list. 


Interrupt Status — RO. Indicates status of Hot-Plug and power management 
interrupts on the root port that result in INTx# message generation. 


0 = Interrupt is deasserted. 
1 = Interrupt is asserted. 


This bit is not set if MSI is enabled. If MSI is not enabled, this bit is set regardless of the 
state of PCICMD.Interrupt Disable bit (D25:FO:04h: bit 10). 
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12.1.5 RI D—Revision I dentification Register 
(Gigabit LAN—D25:F0) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


Revision ID — RO. Refer to the Intel® I/O Controller Hub (ICH9) Family Specification 
Update for the value of the Revision ID Register 





12.1.6 CC—Class Code Register 
(Gigabit LAN—D25:F0) 


Address Offset: O9h-OBh Attribute: RO 
Default Value: 020000h Size: 24 bits 


Description 





12.1.7  CLS—Cache Line Size Register 
(Gigabit LAN—D25:F0) 


Address Offset: OCh Attribute: R/W 
Default Value: 00h Size: 8 bits 


Cache Line Size — R/W. This field is implemented by PCI devices as a read write field 
for legacy compatibility purposes but has no impact on any device functionality. 





12.1.8 PLT—Primary Latency Timer Register 
(Gigabit LAN—D25:F0) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


a 


Latency Timer (LT) — RO. Hardwired to ‘0’. 





12.1.9 HT—Header Type Register 
(Gigabit LAN—D25:F0) 


Address Offset: OEh Attribute: RO 
Default Value: 00h Size: 8 bits 


| Bit | Description 





7:0 Header Type (HT) — RO. 
, 00h = Indicates this is a single function device. 
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12.1.10 


12.1.11 


416 


MBARA—Memory Base Address Register A 
(Gigabit LAN—D25:F0) 


Address Offset: 10h-13h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


The internal CSR registers and memories are accessed as direct memory mapped 
offsets from the base address register. SW may only access whole DWord at a time. 


i 
31:17 Base Address (BA) — R/ W. Software programs this field with the base address of 
, this region. 


Memory Size (MSI ZE) — R/ W. Memory size is 128K Bytes. 


3 Prefetchable Memory (PM) — RO. The GbE LAN controller does not implement 
prefetchable memory. 


Memory Type (MT) — RO. Set to 00b indicating a 32 bit BAR. 
| 0 | Memory / IO Space (MIOS) — RO. Set to ‘0’ indicating a Memory Space BAR. 


MBARB—Memory Base Address Register B 
(Gigabit LAN—D25:F0) 


Address Offset: 14h-17h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 





The internal registers that are used to access the LAN Space in the External FLASH de- 
vice. Access to these registers are direct memory mapped offsets from the base address 
register. SW may only access a DWord at a time. 


a 
31:12 Base Address (BA) — R/ W. Software programs this field with the base address of 
: this region. 


11:4 | Memory Size (MSI ZE) — R/ W. Memory size is 4K Bytes. 


3 Prefetchable Memory (PM) — RO. The Gb LAN controller does not implement 
prefetchable memory. 


2:1 Memory Type (MT) — RO. Set to 00b indicating a 32 bit BAR. 
| 0 | Memory / IO Space (MIOS) — RO. Set to ‘0’ indicating a Memory Space BAR. 
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12.1.12 


12.1.13 


12.1.14 


12.1.15 


MBARC—Memory Base Address Register C 
(Gigabit LAN—D25:F0) 


Address Offset: 18h-1Bh Attribute: R/W, RO 
Default Value: | Q00000001h Size: 32 bits 


Internal registers, and memories, can be accessed using I/O operations. There are two 
4B registers in the 1|O mapping window: Addr Reg and Data Reg. SW may only access a 
Dword at a time. 


a 
31:5 Base Address (BA) — R/ W. Software programs this field with the base address of 
: this region. 


1/ O Size (1OSIZE) — RO. /O space size is 32 Bytes. 
| 0 | Memory / 1O Space (MIOS) — RO. Set to ‘1’ indicating an 10 Space BAR. 


SVI D—Subsystem Vendor | D Register 
(Gigabit LAN—D25:F0) 


Address Offset: 2Ch-2Dh Attribute: RO 
Default Value: See bit description Size: 16 bits 


Subsystem Vendor ID (SVID) — RO. This value may be loaded automatically from 
the NVM Word OCh upon power up depending on the "Load Subsystem ID" bit field in 
NVM word OAN. A value of 8086h is default for this field upon power up if the NVM does 
not respond or is not programmed. All functions are initialized to the same value. 








SID—Subsystem ID Register 
(Gigabit LAN—D25:F0) 


Address Offset: 2Eh-2Fh Attribute: RO 
Default Value: See bit description Size: 16 bits 


a 


Subsystem ID (SID) — RO. This value may be loaded automatically from the NVM 
Word OBh upon power up or reset depending on the “Load Subsystem ID” bit field in 
NVM word OAh with a default value of OOO0Oh. This value is loadable from NVM word 
location OBh. 





ERBA—Expansion ROM Base Address Register 
(Gigabit LAN—D25:F0) 


Address Offset: 30h-33h Attribute: RO 
Default Value: See bit description Size: 32 bits 


a 


Expansion ROM Base Address (ERBA) — RO. This register is used to define the 


address and size information for boot-time access to the optional FLASH memory. If no 
Flash memory exists this register reports OO000000h. 
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12.1.16 CAPP—Capabilities List Pointer Register 
(Gigabit LAN—D25:F0) 


Address Offset: 34h Attribute: RO 
Default Value: C8h Size: 8 bits 


a 


Capabilities Pointer (PTR) — RO. Indicates that the pointer for the first entry in the 
capabilities list is at C8h in configuration space. 





12.1.17 INTR—Interrupt Information Register 
(Gigabit LAN—D25:F0) 


Address Offset: 3Ch-3Dh Attribute: R/W, RO 
Default Value: 0100h Size: 16 bits 
Function Level Reset: No 


Interrupt Pin (IPIN) — RO. Indicates the interrupt pin driven by the Gb LAN 
controller. 


01h = The Gb LAN controller implements legacy interrupts on INTA. 
Interrupt Line (ILINE) — R/W. Default = 00h. Software written value to indicate 


which interrupt line (vector) the interrupt is connected to. No hardware action is taken 
on this register. 





12.1.18 MLMG—Maximum Latency/ Minimum Grant Register 
(Gigabit LAN—D25:F0O) 


Address Offset: 3Eh Attribute: RO 
Default Value: 00h Size: 8 bits 


Description 


7:0 | Maximum Latency/Minimum Grant (MLMG) — RO. Not used. Hardwired to OOh. 





12.1.19 CLIST 1—Capabilities List Register 1 
(Gigabit LAN—D25:F0) 


Address Offset: C8h-C9h Attribute: RO, R/WO 
Default Value: DOO1h Size: 16 bits 


os 
Next Capability (NEXT) — RO. Value of DOh indicates the location of the next pointer. 


Capability 1D (CID) — RO. Indicates the linked list item is a PCl Power Management 
Register. 
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12.1.20 PMC—PCI Power Management Capabilities Register 
(Gigabit LAN—D25:F0) 


Address Offset: CAh-CBh Attribute: RO 
Default Value: See bit descriptions Size: 16 bits 
Function Level Reset: No (Bits 15:11 only) 


Pe etn 


PME_ Support (PMES) — RO. This five-bit field indicates the power states in which the 
function may assert PME#. It depend on PM Ena and AUX-PWR bits in word OAh in the 
NVM: 


Condition Function Value 
PM Ena=0 No PME at all states 0000b 
PM Ena & AUX-PWR=0 PME at DO and D3hot 01001b 


PM Ena & AUX-PWR=1 ERIE at 00, Je ner and 11001b 
D3cold 


These bits are not reset by Function Level Reset. 


[10 [2 Support (B25) —RO. The D2satenotsumpored | 
[2 [Bi_Support (DIS) —RO The Distateisnotsumported 
[86 [Aux_Current (AC) — RO. Required current defined in the Data Register| 
Ey Device Specific I nitialization (DSI) — RO. Set to ‘1. The GbE LAN Controller 
requires its device driver to be executed following transition to the DO un-initialized 
state. 

oe 

— 


Reserved 


PME Clock (PMEC) — RO. Hardwired to ‘0’. 


Version (VS) — RO. Hardwired to 010b to indicate support for Revision 1.1 of the PCI 
Power Management Specification. 
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12.11.21 PMCS—PCI Power Management Control and Status 


420 


Register (Gigabit LAN—D25:F0) 


Address Offset: CCh-CDh Attribute: R/WC, R/W, RO 
Default Value: See bit description Size: 16 bits 
Function Level Reset: No (Bit 8 only) 


Pe etn 


15 PME Status (PMES) — R/WC. This bit is set to ‘1’ when the function detects a wake- 
up event independent of the state of the PMEE bit. Writing a “1” will clear this bit. 


Data Scale (DSC) — R/W. This field indicates the scaling factor to be used when 
interpreting the value of the Data register. 


For the GbE LAN and common functions this field equals 01b (indicating 0.1 watt units) 
if the PM is enabled in the NVM, and the Data_Select field is set to 0, 3, 4, 7, (or 8 for 
Function 0). Else it equals OOb. 


For the manageability functions this field equals 10b (indicating 0.01 watt units) if the 
PM is enabled in the NVM, and the Data_Select field is set to 0, 3, 4, 7. Else it equals 
OOb. 


Data Select (DSL) — R/W. This four-bit field is used to select which data is to be 
reported through the Data register (offset CFh) and Data_Scale field. These bits are 
writeable only when the Power Management is enabled via NVM. 


Oh = DO Power Consumption 

3h = D3 Power Consumption 

4h = DO Power Dissipation 

7h = D3 Power Dissipation 

8h = Common Power 

All other values are reserved. 

PME Enable (PMEE) — R/W. If Power Management is enabled in the NVM, writing a ‘1’ 
to this register will enable Wakeup. If Power Management is disabled in the NVM, 
writing a “1” to this bit has no affect, and will not set the bit to “1”. This bit is not reset 
by Function Level Reset. 


EZ Reserved - Returns a value of ‘000000’. 


Power State (PS) — R/W. This field is used both to determine the current power state 
of the GbE LAN Controller and to set a new power state. The values are: 
00 - DO state (default) 
1:0 01 - Ignored 
10 - Ignored 


11 - D3 state (Power Management must be enables in the NVM or this cycle will be 
ignored). 
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12.1.22 DR—Data Register 
(Gigabit LAN—D25:F0) 


Address Offset: CFh Attribute: RO 
Default Value: See bit description Size: 8 bits 


C2 rr ae 


Reported Data (RD) — RO. This register is used to report power consumption and 
heat dissipation. This register is controlled by the Data_Select field in the PMCS (Offset 


CCh, bits 12:9), and the power scale is reported in the Data_Scale field in the PMCS 
(Offset CCh, bits 14:13). The data of this field is loaded from the NVM if PM is enabled 
in the NVM or with a default value of 0x00 otherwise. 





12.1.23 CLIST 2—Capabilities List Register 2 
(Gigabit LAN—D25:F0) 


Address Offset: DOh-D1h Attribute: R/WO, RO 
Default Value: E0O5h Size: 16 bits 
Function Level Reset: No (Bits 15:8 only) 


Pe scion 


Next Capability (NEXT) — R/WO. Value of EOh points to the Function Level Reset 
capability structure. 


These bits are not reset by Function Level Reset. 


Capability 1D (CID) — RO. Indicates the linked list item is a Message Signaled 
Interrupt Register. 





12.1.24 MCTL—Message Control Register 
(Gigabit LAN—D25:F0) 


Address Offset: D2h-D3h Attribute: R/W, RO 
Default Value: 0080h Size: 16 bits 


Pe at 
7 


64-bit Capable (CID) — RO. Set to ‘1’ to indicate that the GbE LAN Controller is 
capable of generating 64-bit message addresses. 


Multiple Message Enable (MME) — RO. Returns 000b to indicate that the GbE LAN 
controller only supports a single message. 


multiple messages. 


MSI Enable (MSIE) — R/W. 
0 = MSI generation is disabled. 
1 = The Gb LAN controller will generate MSI for interrupt assertion instead of INTx 


Multiple Message Capable (MMC) — RO. The GbE LAN controller does not support 


signaling. 
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12.1.25 MADDL—Message Address Low Register 
(Gigabit LAN—D25:F0) 


Address Offset: D4h-D7h Attribute: R/W 
Default Value: See bit description Size: 32 bits 


a 


Message Address Low (MADDL) — R/W. Written by the system to indicate the lower 


32 bits of the address to use for the MSI memory write transaction. The lower two bits 
will always return 0 regardless of the write operation. 





12.1.26 MADDH—Message Address High Register 
(Gigabit LAN—D25:F0O) 


Address Offset: D8h-DBh Attribute: R/W 
Default Value: See bit description Size: 32 bits 


os 
31:0 Message Address High (MADDH) — R/W. Written by the system to indicate the 
, upper 32 bits of the address to use for the MSI memory write transaction. 
12.1.27 MDAT—Message Data Register 
(Gigabit LAN—D25:F0) 


Address Offset: DCh-DDh Attribute: R/W 
Default Value: See bit description Size: 16 bits 


Pen 


Message Data (MDAT) — R/W. Written by the system to indicate the lower 16 bits of 
the data written in the MSI memory write DWORD transaction. The upper 16 bits of the 
transaction are written as 0000h. 








12.1.28 FLRCAP—Function Level Reset Capability 
(Gigabit LAN—D25:F0) 


Address Offset: EQh-E1h Attribute: RO 
Default Value: 0009h Size: 16 bits 


Next Pointer — RO. This field provides an offset to the next capability item in the 
capability list. The value of 0Oh indicates the last item in the list. 


Capability 1D — RO. The value of this field depends on the FLRCSSEL bit. 
13h = If FLRCSSEL = 0 
09h = If FLRCSSEL = 1, indicating vendor specific capability. 
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12.1.29 


12.1.30 


FLRCLV—Function Level Reset Capability Length and 
Version 

(Gigabit LAN—D25:F0) 

Address Offset: E2h-E3h Attribute: R/WO, RO 
Default Value: See Description. Size: 16 bits 
Function Level Reset: No (Bits 9:8 Only When FLRCSSEL = 0) 


When FLRCSSEL = 0, this register is defined as follows: 


LS 
15:10 | Reserved. 


Function Level Reset Capability — R/WO. 
1 = Support for Function Level Reset. 


This bit is not reset by Function Level Reset. 


TXP Capability — R/WO. 
1 = Indicates support for the Transactions Pending (TXP) bit. TXP must be supported if 
FLR is supported. 


Capability Length — RO. The value of this field indicates the number of bytes of the 
vendor specific capability as require by the PCI spec. It has the value of 06h for the 
Function Level Reset capability. 


Vendor Specific Capability |D — RO. A value of 2h in this field identifies this 
capability as Function Level Reset. 


Capability Version— RO. The value of this field indicates the version of the Function 
Level Reset Capability. Default is Oh. 


Capability Length — RO. The value of this field indicates the number of bytes of the 
vendor specific capability as require by the PCI spec. It has the value of 06h for the 
Function Level Reset capability. 





DEVCTRL—Device Control (Gigabit LAN—D25:F0) 


Address Offset: E4-E5h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


Pe sino 


Transactions Pending (TXP) — R/W. 
1 = Indicates the controller has issued Non-Posted requests which have not been 


completed. 
0 = Indicates that completions for all Non-Posted requests have been received. 


Initiate Function Level Reset — RO. This bit is used to initiate an FLT transition. A 
write of ‘1’ initiates the transition. Since hardware must not respond to any cycles until 


Function Level Reset completion, the value read by software from this bit is 0. 
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12.2.1 


12.2.2 
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MBARA—Gigabit LAN Base Address A Registers 


The internal CSR registers and memories are accessed as direct memory mapped 
offsets from the base address register. This block is mapped into memory space, using 
the MBARA Base Address register see Section 12.1.10. SW may only access whole 
DWord at a time. 


Gigabit LAN Base Address A Registers Address Map (Gigabit LAN— D25:F0) 


| -00-03h_— 03h | = LDR4 LAN Device Initialization 4 | 14200100h | 


ee OBh — LAN Device Initialization 3 00080xxxh Sao 
18-1Bh LDCR2 LAN Device Control 2 01500000h 


LDR4—LAN Device Initialization Register 4 
(Gigabit LAN Memory Mapped Base Address Register) 





Address Offset: MBARA + Oh Attribute: RO 
Default Value: 14200100h Size: 32 bits 


Pe inom 


LDR3—LAN Device Initialization Register 3 
(Gigabit LAN Memory Mapped Base Address Register) 





Address Offset: MBARA + 8h Attribute: RO 
Default Value: 00080xxxh Size: 32 bits 


Pe cn 


LDR3 Field 1 — RO. When set, this bit enables the automatic reduction of DMA 


frequency. This bit is loaded from word 13h in the NVM. 
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12.2.3 


12.2.4 


12.2.5 


12.2.6 


LDCR2—LAN Device Control Register 2 
(Gigabit LAN Memory Mapped Base Address Register) 


Address Offset: MBARA + 18h Attribute: R/W 
Default Value: | 01500000h Size: 32 bits 


i ee 
31:21 | Reserved 


LAN PHY Power Down Enable (LPPDE) — R/W. When set, enables the PHY to enter 
20 a low-power state when the LAN controller is at the DMoff / D3 or Dr and no WoL. 


This bit is loaded from word 13h in the NVM. 
LDCR2 Field 1 — R/W. This bit is loaded from word 13h in the NVM. 


Reserved 


LDCR4—LAN Device Control Register 4 
(Gigabit LAN Memory Mapped Base Address Register) 





Address Offset: MBARA + 20h Attribute: R/W 
Default Value: 1000xxxxh Size: 32 bits 


BIOS may program this field. 


} Bit | Description 


LDR5—LAN Device Control Register 5 
(Gigabit LAN Memory Mapped Base Address Register) 


Address Offset: MBARA + FOOh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


5 rr 


LDCR5 Field 1 — R/W. BIOS may set this bit. 
pao fReeved 


LDR2—LAN Device Initialization Register 1 
(Gigabit LAN Memory Mapped Base Address Register) 





Address Offset: MBARA + 3024h Attribute: R/W 
Default Value: | 60006006h Size: 32 bits 


| a 


LDR1 Field 1 — R/W. BIOS must program this field to 1b. 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 425 


® 
| n tel Gigabit LAN Configuration Registers 


§ §§ 


426 Intel® |/O Controller Hub 9 (1CH9) Family Datasheet 


| | ® 
LPC Interface Bridge Registers (D31:FO) [ n tel ) 


13 


13.1 


Note: 


Table 13-1. 





LPC Interface Bridge Registers 
(D31:FO) 


The LPC bridge function of the I|CH9 resides in PCI Device 31:Function 0. This function 
contains many other functional units, such as DMA and Interrupt controllers, Timers, 
Power Management, System Management, GPIO, RTC, and LPC Configuration 
Registers. 


Registers and functions associated with other functional units (EHCI, UHCI, etc.) are 
described in their respective sections. 


PCI Configuration Registers (LPC |/ F—D31:F0) 


Address locations that are not shown should be treated as Reserved. 


LPC Interface PCI Register Address Map (LPC I/ F—D31:FO) (Sheet 1 of 2) 


Vendor Identification 8086h 


See register 
description 


I 
sc 
BC 

L 


00h-O1h 


02h-03h Device Identification 


34h 

Ah 
AC 

4h 

Oh 


HEADTYP Header Type 


—— 
ea 
ce [ese Gass Code th 
ar | 
HEAT _| 
RIO 


D 
C 
C 
PLT Primary Latency Timer 
S 
C 


2Ch-2Fh 


Ty 

[ec fenoconr th 
aR 
Ty 


0 
0 
0 
4 
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Table 13-1. LPC Interface PCI Register Address Map (LPC 1/ F—D31:FO) (Sheet 2 of 2) 


13.1.1 


13.1.2 


428 


[ vnemonie | negiternome [veto [Type 
SS) A a 


D4h-D5h FWH_SEL2 _ | Firmware Hub Select 2 4567h 
D8h-D9h | FWH_DEC_EN1 | Firmware Hub Decode Enable 1 FFCFh R/W, RO 


/W 
R/W 


EOh-E1h FDCAP Feature Detection Capability ID 0009h 


= <DLEN | Feature Detection Capability Sv ocn fro 
Length 


FDVER Feature Detection Version 


E4n-eBh | FDVCT _| Feature Vector 
Description 


FOh-F3h RCBA Root Complex Base Address 00000000h | RW 


vi D—Vendor Identification Register (LPC | / F—D31:FO) 





Offset Address: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16-bit 
Lockable: No Power Well: Core 


oe 
Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h 


DI D—Device Identification Register (LPC 1/ F—D31:F0) 





Offset Address: 0O2h-03h Attribute: RO 
Default Value: See bit description Size: 16-bit 
Lockable: No Power Well: Core 


as 


Device I D — RO. This is a 16-bit value assigned to the Intel® |CH9 LPC bridge. Refer 


to the Intel® 1/O Controller Hub (1CH9) Family Specification Update for the value of 
the Device ID Register. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


i ® 
LPC Interface Bridge Registers (D31:FO) j n tel 


13.1.3 PCI CMD—PCI COMMAND Register (LPC I / F—D31:F0) 


Offset Address: O4h-0O5h Attribute: R/W, RO 
Default Value: 0007h Size: 16-bit 
Lockable: No Power Well: Core 


Pee earns 
15:10 | Reserved 


Fast Back to Back Enable (FBE) — RO. Hardwired to 0. 
SERR# Enable (SERR_EN) — R/W. The LPC bridge generates SERR# if this bit is set. 
Wait Cycle Control (WCC) — RO. Hardwired to 0. 


VGA Palette Snoop (VPS) — RO. Hardwired to 0. 

Memory Write and Invalidate Enable (MWIE) — RO. Hardwired to 0. 
Special Cycle Enable (SCE) — RO. Hardwired to 0. 

Bus Master Enable (BME) — RO. Bus Masters cannot be disabled. 


Memory Space Enable (MSE) — RO. Memory space cannot be disabled on LPC. 


Parity Error Response Enable (PERE) — R/W. 

0 = No action is taken when detecting a parity error. 

1 = Enables the ICH9 LPC bridge to respond to parity errors detected on backbone 
interface. 


1/O Space Enable (1OSE) — RO. I/O space cannot be disabled on LPC. 
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13.1.4 PCISTS—PCI Status Register (LPC I|/ F—D31:F0) 


Offset Address: O6h-07h Attribute: RO, R/WC 
Default Value: 0210h Size: 16-bit 
Lockable: No Power Well: Core 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


Detected Parity Error (DPE) — R/WC. Set when the LPC bridge detects a parity 
error on the internal backbone. Set even if the PCICMD.PERE bit (D31:F0:04, bit 6) is 
0 


0 = Parity Error Not detected. 
1 = Parity Error detected. 


Signaled System Error (SSE)— R/WC. Set when the LPC bridge signals a system 
error to the internal SERR# logic. 


Master Abort Status (RMA) — R/WC. 

0 = Unsupported request status not received. 

1 = The bridge received a completion with unsupported request status from the 
backbone. 

Received Target Abort (RTA) — R/WC. 


0 = Completion abort not received. 
1 = Completion with completion abort received from the backbone. 


Signaled Target Abort (STA) — R/WC. 
11 0 = Target abort Not generated on the backbone. 
1 = LPC bridge generated a completion packet with target abort status on the 
backbone. 


DEVSEL# Timing Status (DEV_ STS) — RO. 
01 = Medium Timing. 
Data Parity Error Detected (DPED) — R/WC. 


0 = All conditions listed below Not met. 
1 = Set when all three of the following conditions are met: 


¢ LPC bridge receives a completion packet from the backbone from a previous request, 
¢ Parity error has been detected (D31:F0:06, bit 15) 
* PCICMD.PERE bit (D31:F0:04, bit 6) is set. 


Fast Back to Back Capable (FBC): Reserved - bit has no meaning on the internal 
backbone. 


Reserved. 


66 MHz Capable (66MHZ_CAP) — Reserved - bit has no meaning on the internal 
backbone. 


Capabilities List (CLIST) — RO. Capability list exists on the LPC bridge. 


Interrupt Status (1S) — RO. The LPC bridge does not generate interrupts. 
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13.1.5 


13.1.6 


13.1.7 


13.1.8 


13.1.9 


RI D—Revision I dentification Register (LPC |/ F—D31:F0) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


Revision ID (RID) — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family 
Specification Update for the value of the Revision |D Register 





PI —Programming Interface Register (LPC 1 / F—D31:FO) 


Offset Address: 09h Attribute: RO 
Default Value: 00h Size: 8 bits 


} Bit | Description 


Programming Interface — RO. 


SCC—Sub Class Code Register (LPC 1/ F—D31:FO) 


Offset Address: OAh Attribute: RO 
Default Value: Olh Size: 8 bits 


Description 


Sub Class Code — RO. 8-bit value that indicates the category of bridge for the LPC 


bridge. 
01h = PCI-to-ISA bridge. 





BCC—Base Class Code Register (LPC I / F—D31:F0) 


Offset Address: OBh Attribute: RO 
Default Value: 06h Size: 8 bits 


Base Class Code — RO. 8-bit value that indicates the type of device for the LPC 
bridge. 
06h = Bridge device. 





PLT—Primary Latency Timer Register (LPC 1/ F—D31:F0) 


Offset Address: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


a 


Master Latency Count (MLC) — Reserved. 
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13.1.10 


13.1.11 


13.1.12 


13.1.13 


432 


HEADTYP—Header Type Register (LPC I / F—D31:F0) 


Offset Address: OEh Attribute: RO 
Default Value: 80h Size: 8 bits 


a 


Multi-Function Device — RO. This bit is 1 to indicate a multi-function device. 





} 60 | Header Type — RO. This 7-bit field identifies the header layout of the configuration 
space. 


SS—Sub System Identifiers Register (LPC | / F—D31:FO) 


Offset Address: 2Ch-2Fh Attribute: R/WO 
Default Value: 00000000h Size: 32 bits 


This register is initialized to logic 0 by the assertion of PLTRST#. This register can be 
written only once after PLTRST# de-assertion. 


foe ese 
31:16 Subsystem ID (SSID) — R/WO. This is written by BIOS. No hardware action taken on 
, this value. 
15:0 Subsystem Vendor ID (SSVID) — R/WO. This is written by BIOS. No hardware 
, action taken on this value. 


CAPP—Capability List Pointer (LPC | / F—D31:F0) 


Offset Address: 34h Attribute: RO 
Default Value: EOh Size: 8 bits 


a 


Capability Pointer (CP) — RO. Indicates the offset of the of the first capability item. 








PMBASE—ACPI Base Address Register (LPC |/ F—D31:F0) 


Offset Address: 40h-43h Attribute: R/W, RO 

Default Value: 00000001h Size: 32 bit 

Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


Sets base address for ACPI I/O registers, GPIO registers and TCO I/O registers. These 
registers can be mapped anywhere in the 64-K I/O space on 128-byte boundaries. 


as 


Base Address — R/W. This field provides 128 bytes of |/O space for ACPI, GPIO, and 
TCO logic. This is placed on a 128-byte boundary. 





e 


Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate I1/O space. 
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13.1.14 ACPI_CNTL—ACPI Control Register (LPC I/ F — D31:FO) 


Offset Address: 44h Attribute: R/W 

Default Value: 00h Size: 8 bit 

Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


Pe scien 


ACPI Enable (ACPI_EN) — R/W. 

0 = Disable. 

1 = Decode of the I/O range pointed to by the ACPI base register is enabled, and the 
ACPI power management function is enabled. Note that the APM power 
management ranges (B2/B3h) are always enabled and are not affected by this bit. 


6:3 Reserved 


programmed for active-high reception. When the interrupt is mapped to APIC interrupts 


SCI IRQ Select (SCI_IRQ_ SEL) — R/W. 
Specifies on which IRQ the SCI will internally appear. If not using the APIC, the SCI 
must be routed to IRQ9-11, and that interrupt is not sharable with the SERIRQ stream, 
but is shareable with other PCI interrupts. If using the APIC, the SCI can also be 
mapped to IRQ20-23, and can be shared with other interrupts. 
Bits SCI Map 
000b IRQ9 
001b IRQ10 
2:0 010b IRQ11 
011b Reserved 
100b IRQ20 (Only available if APIC 
enabled) 
101b IRQ21 (Only available if APIC 
enabled) 
When the interrupt is mapped to APIC interrupts 9, 10 or 11, the APIC should be 
20 through 23, the APIC should be programmed for active-low reception. 
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13.1.15 GPIOBASE—GPIO Base Address Register (LPC I/ F — 


D31:FO) 
Offset Address: 48h-4Bh Attribute: R/W, RO 
Default Value: | 00000001h Size: 32 bit 


pe 
31:16 Reserved. Always 0. 


Base Address (BA) — R/W. Provides the 128 bytes of I/O space for GPIO. 
Base Address (BA) — R/W. Provides the 64 bytes of I/O space for GPIO. 


Reserved. Always 0. 


Reserved. Always 0. 


| 0 | RO. Hardwired to 1 to indicate I/O space. 
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13.1.16 GC—GPIO Control Register (LPC 1/ F — D31:FO) 


Offset Address: 4Ch Attribute: R/W 
Default Value: 00h Size: 8 bit 


Pe 2 


7:5 


Reserved. 


GPIO Enable (EN) — R/W. This bit enables/disables decode of the I/O range pointed 
to by the GPIO Base Address register (D31:F0:48h) and enables the GPIO function. 

0 = Disable. 

1 = Enable. 


Reserved. 


GPIO Lockdown Enable (GLE) — R/W. This bit enables lockdown of the following 
GPIO registers: 
Offset 00h: GPIO_USE_SEL[31:0] 
Offset 04h: GP_IO_SEL[31:0] 
Offset OCh: GP_LVL[31:0] 
Offset 30h: GPIO_USE_SEL[63: 32] 
Offset 34h: GP_IO_SEL[63:32] 
Offset 38h: GP_LVL[63: 32] 
0 = Disable. 
1 = Enable. 


When this bit is written from a ‘1’ to a ‘0’ an SMI# is generated if enabled. This ensures 
that only SMM code can change the above GPIO registers after they are locked down. 
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13.1.17 PIRQ[n]_ ROUT—PIRQ[A,B,C,D] Routing Control Register 
(LPC I/ F—D31:F0) 


Offset Address: PIRQA - 60h, PIRQB - 61h, Attribute: R/W 
PIRQC - 62h, PIRQD - 63h 

Default Value: 80h Size: 8 bit 

Lockable: No Power Well: Core 


a 


Interrupt Routing Enable (IRQEN) — R/W. 

0 = The corresponding PIRQ is routed to one of the ISA-compatible interrupts 
specified in bits[3:0]. 

1 = The PIRQ is not routed to the 8259. 


NOTE: BIOS must program this bit to 0 during POST for any of the PIRQs that are 
being used. The value of this bit may subsequently be changed by the OS 
when setting up for I/O APIC interrupt delivery mode. 


IRQ Routing — R/W. (ISA compatible.) 


Value IRQ Value IRQ 
0000b Reserved 1000b Reserved 
0001b Reserved 1001b = IRQ9 
0010b Reserved 1010b IRQ10 
0011b IRQ3 1011b IRQ11 
0100b IRQ4 1100b = IRQ12 
0101b IRQ5 1101b Reserved 
0110b IRQ6 1110b IRQ14 
0111b IRQ7 1111b IRQ15 
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13.1.18 SIRQ_ CNTL—Serial |1RQ Control Register 
(LPC I/ F—D31:F0) 


Offset Address: 64h Attribute: R/W, RO 
Default Value: 10h Size: 8 bit 
Lockable: No Power Well: Core 


Peon 


Serial I|RQ Enable (SIRQEN) — R/W. 


0 = The buffer is input only and internally SERIRQ will be a 1. 
1 = Serial IRQs will be recognized. The SERIRQ pin will be configured as SERIRQ. 


Serial IRQ Mode Select (SIRQMD) — R/W. 

0 = The serial IRQ machine will be in quiet mode. 

1 = The serial IRQ machine will be in continuous mode. 

NOTE: For systems using Quiet Mode, this bit should be set to 1 (Continuous Mode) for 


at least one frame after coming out of reset before switching back to Quiet 
Mode. Failure to do so will result in the ICH9 not recognizing SERIRQ interrupts. 


5:2 Serial |RQ Frame Size (SIRQSZ) — RO. Fixed field that indicates the size of the 
, SERIRQ frame as 21 frames. 


Start Frame Pulse Width (SFPW) — R/W. This is the number of PCI clocks that the 
SERIRQ pin will be driven low by the serial IRQ machine to signal a start frame. In 
continuous mode, the ICH9 will drive the start frame for the number of clocks specified. 
In quiet mode, the ICH9 will drive the start frame for the number of clocks specified 
minus one, as the first clock was driven by the peripheral. 
00 = 4 clocks 
01 = 6 clocks 

= 8 clocks 

= Reserved 
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13.1.19 PIRQ[n]_ ROUT—PIRQ[E,F,G,H] Routing Control Register 
(LPC I/ F—D31:F0) 


Offset Address: PIRQE - 68h, PIRQF - 69h, Attribute: R/W 
PIRQG - 6Ah, PIRQH - 6Bh 

Default Value: 80h Size: 8 bit 

Lockable: No Power Well: Core 


i en re 


Interrupt Routing Enable (IRQEN) — R/W. 

0 = The corresponding PIRQ is routed to one of the ISA-compatible interrupts specified 
in bits[3:0]. 

1 = The PIRQ is not routed to the 8259. 


NOTE: BIOS must program this bit to 0 during POST for any of the PIRQs that are 
being used. The value of this bit may subsequently be changed by the OS when 
setting up for |/O APIC interrupt delivery mode. 


| 6:4 | Reserved 


IRQ Routing — R/W. (ISA compatible. ) 


Value IRQ Value IRQ 
0000b Reserved 1000b Reserved 
0001b Reserved 1001b IRQ9 
0010b = Reserved 1010b = IRQ10 
0011b IRQ3 1011b IRQ11 
0100b = IRQ4 1100b =IRQ12 
0101b IRQ5 1101b Reserved 
0110b IRQ6 1110b IRQ14 
0111b IRQ7 1111b IRQ15 
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13.1.20 LPC_IBDF—IOxAPIC Bus:Device:Function 
(LPC I/ F—D31:F0) 


Offset Address: 6Ch-6Dh Attribute: R/W 
Default Value: OOF8h Size: 16 bit 


Pe sco 


1OxAPIC Bus:Device:Function (1 BDF) — R/W. this field specifies the 
bus: device: function that I|CH9’s |OxAPIC will be using for the following: 


« As the Requester ID when initiating Interrupt Messages to the processor. 


« As the Completer 1D when responding to the reads targeting the |OxAPIC’s Memory- Mapped I/ 
O registers. 


The 16-bit field comprises the following: 


Bits Description 
15:8 Bus Number 

7:3 Device Number 
2:0 Function Number 


This field defaults to Bus 0: Device 31: Function 0 after reset. BIOS can program this 
field to provide a unique bus: device: function number for the internal |OxAPIC. 





13.1.21 LPC_I/O_DEC—I/ O Decode Ranges Register 
(LPC I1/ F—D31:FO) 


Offset Address: 80h Attribute: R/W 
Default Value: 0000h Size: 16 bit 


Pe nso 


FDD Decode Range — R/W. Determines which range to decode for the FDD Port 


0 = 3F0h - 3F5h, 3F7h (Primary) 
1 = 370h - 375h, 377h (Secondary) 


LPT Decode Range — R/W. This field determines which range to decode for the LPT 
Port. 


00 = 378h - 37Fh and 778h - 77Fh 

01 = 278h - 27Fh (port 279h is read only) and 678h - 67Fh 
10 = 3BCh -3BEh and 7BCh - 7BEh 

11 = Reserved 
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COMB Decode Range — R/W. This field determines which range to decode for the 
COMB Port. 


000 = 3F8h - 3FFh (COM1) 
001 = 2F8h - 2FFh (COM2) 
010 = 220h - 227h 
011 = 228h - 22Fh 
100 = 238h - 23Fh 
101 = 2E8h - 2EFh (COM4) 
110 = 338h - 33Fh 
111 = 3E8h - 3EFh (COM3) 


Reserved 


COMA Decode Range — R/W. This field determines which range to decode for the 
COMA Port. 


000 = 3F8h - 3FFh (COM1) 
001 = 2F8h - 2FFh (COM2) 
010 = 220h - 227h 
011 = 228h - 22Fh 
100 = 238h - 23Fh 
101 = 2E8h - 2EFh (COM4) 
110 = 338h - 33Fh 
111 = 3E8h - 3EFh (COM3) 





LPC_EN—LPC I/ F Enables Register (LPC |/ F—D31:FO) 


Offset Address: 82h - 83h Attribute: R/W 
Default Value: | 0000h Size: 16 bit 
Power Well: Core 


eb 


CNF2_LPC_EN — R/W. Microcontroller Enable # 2. 


0 = Disable. 
1 = Enables the decoding of the I/O locations 4Eh and 4Fh to the LPC interface. This 
range is used for a microcontroller. 


CNF1_LPC_EN — R/W. Super I/O Enable. 


0 = Disable. 
1 = Enables the decoding of the I/O locations 2Eh and 2Fh to the LPC interface. This 
range is used for Super I/O devices. 


0 = Disable. 
1 = Enables the decoding of the I/O locations 62h and 66h to the LPC interface. This 
range is used for a microcontroller. 


KBC_LPC_EN — R/W. Keyboard Enable. 


0 = Disable. 
1 = Enables the decoding of the I/O locations 60h and 64h to the LPC interface. This 
range is used for a microcontroller. 





MC_LPC_EN — R/W. Microcontroller Enable # 1. 
11 
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0 = Disable. 
1 = Enables the decoding of the I/O locations 208h to 20Fh to the LPC interface. This 
range is used for a gameport. 


GAMEL_LPC_EN — R/W. Low Gameport Enable 
0 = Disable. 


1 = Enables the decoding of the I/O locations 200h to 207h to the LPC interface. This 
range is used for a gameport. 


Reserved 


FDD_LPC_EN — R/W. Floppy Drive Enable 


0 = Disable. 
1 = Enables the decoding of the FDD range to the LPC interface. This range is selected 


in the LPC_FDD/LPT Decode Range Register (D31:F0:80h, bit 12). 


LPT_LPC_EN — R/W. Parallel Port Enable 

0 = Disable. 

1 = Enables the decoding of the LPTrange to the LPC interface. This range is selected in 
the LPC_FDD/LPT Decode Range Register (D31:F0: 80h, bit 9:8). 


COMB_LPC_EN — R/W. Com Port B Enable 


0 = Disable. 
1 = Enables the decoding of the COMB range to the LPC interface. This range is 
selected in the LPC_COM Decode Range Register (D31:F0: 80h, bits 6:4). 


COMA_LPC_EN — R/W. Com Port A Enable 
0 = Disable. 


1 = Enables the decoding of the COMA range to the LPC interface. This range is 
selected in the LPC_COM Decode Range Register (D31:F0:80h, bits 3:2). 





13.1.23 GEN1_DEC—LPC I/ F Generic Decode Range 1 Register 
(LPC I1/ F—D31:F0) 


Offset Address: 84h - 87h Attribute: R/W 
Default Value: 00000000h Size: 32 bit 
Power Well: Core 


ee eee 


Generic I / O Decode Range Address[7:2] Mask — R/W. A ‘1’ in any bit position 
indicates that any value in the corresponding address bit in a received cycle will be 
treated as a match. The corresponding bit in the Address field, below, is ignored. The 
mask is only provided for the lower 6 bits of the DWord address, allowing for decoding 
blocks up to 256 bytes in size. 


Generic | / O Decode Range 1 Base Address (GEN1_ BASE) — R/W. This address is 
15:2 | aligned on a 128-byte boundary, and must have address lines 31:16 as 0. 
NOTE: The !1CH Does not provide decode down to the word or byte level 


Generic Decode Range 1 Enable (GEN1_EN) — R/W. 


0 = Disable. 
1 = Enable the GEN1 I/O range to be forwarded to the LPC I/F 
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13.1.24 GEN2_DEC—LPC I/ F Generic Decode Range 2 Register 
(LPC |/ F—D31:FO) 


Offset Address: 88h - 8Bh Attribute: R/W 
Default Value: 00000000h Size: 32 bit 
Power Well: Core 


eb 


Generic I / O Decode Range Address[7:2] Mask — R/W. A ‘1’ in any bit position 
indicates that any value in the corresponding address bit in a received cycle will be 
23:18 


treated as a match. The corresponding bit in the Address field, below, is ignored. The 
mask is only provided for the lower 6 bits of the DWord address, allowing for decoding 
blocks up to 256 bytes in size. 


15:2 Generic I/ O Decode Range 2 Base Address (GEN1_BASE) — R/W. 
: NOTE: The !CH Does not provide decode down to the word or byte level 


Generic Decode Range 2 Enable (GEN2_EN) — R/W. 


0 = Disable. 
1 = Enable the GEN2 I/O range to be forwarded to the LPC I/F 





13.1.25 GEN3_DEC—LPC I/ F Generic Decode Range 3 Register 
(LPC 1/ F—D31:F0) 


Offset Address: 8Ch - 8Eh Attribute: R/W 
Default Value: 00000000h Size: 32 bit 
Power Well: Core 


a 
Generic I/ O Decode Range Address[7:2] Mask — R/W. A ‘1’ in any bit position 
indicates that any value in the corresponding address bit in a received cycle will be 

23:18 | treated as a match. The corresponding bit in the Address field, below, is ignored. The 


mask is only provided for the lower 6 bits of the DWord address, allowing for decoding 
blocks up to 256 bytes in size. 


15:2 Generic I/ O Decode Range 3 Base Address (GEN3_ BASE) — R/W. 
, NOTE: The !CH Does not provide decode down to the word or byte level 


Generic Decode Range 3 Enable (GEN3_EN) — R/W. 


0 = Disable. 
1 = Enable the GEN3 I/O range to be forwarded to the LPC I/F 
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13.1.26 GEN4 DEC—LPC I/ F Generic Decode Range 4 Register 
(LPC |/ F—D31:F0) 


Offset Address: 90h - 93h Attribute: R/W 
Default Value: 00000000h Size: 32 bit 
Power Well: Core 


i 
31:24 | Reserved 


Generic I / O Decode Range Address[7:2] Mask — R/W. A ‘1’ in any bit position 
indicates that any value in the corresponding address bit in a received cycle will be 
23:18 


treated as a match. The corresponding bit in the Address field, below, is ignored. The 
mask is only provided for the lower 6 bits of the DWord address, allowing for decoding 
blocks up to 256 bytes in size. 


15:2 Generic |/ O Decode Range 4 Base Address (GEN4_ BASE) — R/W. 
: NOTE: The !CH Does not provide decode down to the word or byte level 


Generic Decode Range 4 Enable (GEN4_EN) — R/W. 


0 = Disable. 
1 = Enable the GEN4 I/O range to be forwarded to the LPC I/F 
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13.1.27 FWH_SEL1—Firmware Hub Select 1 Register 
(LPC I/ F—D31:F0) 


Offset Address: DOh-D3h Attribute: R/W, RO 
Default Value: 00112233h Size: 32 bits 


Ce sco 


FWH_F8_1IDSEL — RO. |IDSEL for two 512-KB Firmware Hub memory ranges and one 
128-KB memory range. This field is fixed at 0000. The IDSEL programmed in this field 
addresses the following memory ranges: 

FFF8 0000h - FFFF FFFFh 

FFB8 0000h - FFBF FFFFh 

OOOE 0000h - OOOF FFFFh 


FWH_FO_IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 

FFFO 0O000h - FFF7 FFFFh 

FFBO 0000h - FFB7 FFFFh 


FWH_E8_!IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 


FFE8 0000h - FFEF FFFFh 
FFA8 0000h - FFAF FFFFh 


FWH_EO_IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 


FFEO 0000h - FFE7 FFFFh 
FFAO 0000h - FFA7 FFFFh 


FWH_D8_1IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 


FFD8 0000h - FFDF FFFFh 
FF98 0000h - FFOF FFFFh 


FWH_DO_1IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 


FFDO 0000h - FFD7 FFFFh 
FF90 0000h - FF97 FFFFh 


FWH_C8_1IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 

FFC8 0000h - FFCF FFFFh 

FF88 0000h - FF8F FFFFh 


FWH_CO0O_IDSEL — R/W. IDSEL for two 512-KB Firmware Hub memory ranges. 
IDSEL programmed in this field addresses the following memory ranges: 

FFCO 0O00Oh - FFC7 FFFFh 

FF80 0000h - FF87 FFFFh 
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13.1.28 FWH_SEL2—Firmware Hub Select 2 Register 
(LPC I/ F—D31:F0) 


Offset Address: D4h-D5h Attribute: R/W 
Default Value: 4567h Size: 16 bits 


2 rr ee 


FWH_70_1IDSEL — R/W. IDSEL for two, 1-M Firmware Hub memory ranges. 
The IDSEL programmed in this field addresses the following memory ranges: 
FF70 O000h - FF7F FFFFh 
FF30 0000h - FF3F FFFFh 


FWH_60_1IDSEL — R/W. IDSEL for two, 1-M Firmware Hub memory ranges. 
The IDSEL programmed in this field addresses the following memory ranges: 


FF60 0000h - FF6F FFFFh 


FF20 0000h - FF2F FFFFh 


FWH_50_1IDSEL — R/W. IDSEL for two, 1-M Firmware Hub memory ranges. 
The IDSEL programmed in this field addresses the following memory ranges: 
FF50 0000h - FF5F FFFFh 
FF10 O0000h - FF1F FFFFh 


FWH_40_1IDSEL — R/W. IDSEL for two, 1-M Firmware Hub memory ranges. 
The IDSEL programmed in this field addresses the following memory ranges: 
FF40 0000h - FF4F FFFFh 
FFOO O0000h - FFOF FFFFh 





13.1.29 FWH_DEC_EN1—Firmware Hub Decode Enable Register 
(LPC I1/ F—D31:FO) 


Offset Address: D8h-D9h Attribute: R/W, RO 
Default Value: FFCFh Size: 16 bits 


C7 arr 


FWH_F8_EN — RO. This bit enables decoding two 512-KB Firmware Hub memory 
ranges, and one 
128-KB memory range. 
0 = Disable 
1 = Enable the following ranges for the Firmware Hub 
FFF80000h - FFFFFFFFh 
FFB80000h - FFBFFFFFh 


FWH_FO_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 


0 = Disable. 

1 = Enable the following ranges for the Firmware Hub: 
FFFOOOOOh - FFF7FFFFh 
FFBOOOOOh - FFB7FFFFh 


FWH_E8_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub: 
FFE80000h - FFEFFFFh 
FFA80000h - FFAFFFFFh 
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FWH_EO_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub: 
FFEQOOOOh - FFE7FFFFh 
FFAQOOOOh - FFA7FFFFh 


FWH_D8_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFD80000h - FFDFFFFFh 
FF980000h - FFOFFFFFh 


FWH_DO_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFDOOOOOh - FFD7FFFFh 
FF900000h - FF97FFFFh 


FWH_C8_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFC80000h - FFCFFFFFh 
FF880000h - FF8FFFFFh 


FWH_CO0O_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFCOOOOOh - FFC7FFFFh 
FF800000h - FF87FFFFh 


FWH_Legacy_F_EN — R/W. This enables the decoding of the legacy 64KB range at 
FOOOOh - FFFFFh. 


0 = Disable. 
1 = Enable the following legacy ranges for the Firmware Hub 
FOOOOh - FFFFFh 


Note: The decode for the BIOS legacy F segment is enabled only by this bit and is not 
affected by the GEN_PMCON_1.iA64_EN bit. 

FWH_Legacy_E_EN — R/W. This enables the decoding of the legacy 64KB range at 
EOOOOh - EFFFFh. 


0 = Disable. 
1 = Enable the following legacy ranges for the Firmware Hub 
E0000h - EFFFFh 


Note: The decode for the BIOS legacy E segment is enabled only by this bit and is not 
affected by the GEN_PMCON_1.iA64_EN bit. 


FWH_70_EN — R/W. Enables decoding two 1-M Firmware Hub memory ranges. 
0 = Disable. 
3 1 = Enable the following ranges for the Firmware Hub 
FF70 0000h - FF7F FFFFh 


FF30 0000h - FF3F FFFFh 
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FWH_EO_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub: 
FFEQOOOOh - FFE7FFFFh 
FFAQOOOOh - FFA7FFFFh 


FWH_D8_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFD80000h - FFDFFFFFh 
FF980000h - FFOFFFFFh 


FWH_DO_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFDOOOOOh - FFD7FFFFh 
FF900000h - FF97FFFFh 


FWH_C8_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFC80000h - FFCFFFFFh 
FF880000h - FF8FFFFFh 


FWH_CO0O_EN — R/W. This bit enables decoding two 512-KB Firmware Hub memory 
ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 
FFCOOOOOh - FFC7FFFFh 
FF800000h - FF87FFFFh 


FWH_Legacy_F_EN — R/W. This enables the decoding of the legacy 64KB range at 
FOOOOh - FFFFFh. 


0 = Disable. 
1 = Enable the following legacy ranges for the Firmware Hub 
FOOOOh - FFFFFh 
Note: The decode for the BIOS legacy F segment is enabled only by this bit and is not 
affected by the GEN_PMCON_1.iA64_EN bit. 


FWH_Legacy_E_EN — R/W. This enables the decoding of the legacy 64KB range at 
EOOOOh - EFFFFh. 


0 = Disable. 
1 = Enable the following legacy ranges for the Firmware Hub 
E0000h - EFFFFh 


Note: The decode for the BIOS legacy E segment is enabled only by this bit and is not 
affected by the GEN_PMCON_1.iA64_EN bit. 


FWH_70_EN — R/W. Enables decoding two 1-M Firmware Hub memory ranges. 
0 = Disable. 
3 1 = Enable the following ranges for the Firmware Hub 
FF70 0000h - FF7F FFFFh 


FF30 0000h - FF3F FFFFh 
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FWH_60_EN — R/W. Enables decoding two 1-M Firmware Hub memory ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 

FF60 0000h - FFO6OF FFFFh 

FF20 0000h - FF2F FFFFh 


FWH_50_EN — R/W. Enables decoding two 1-M Firmware Hub memory ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 

FF50 0000h - FF5F FFFFh 

FF10 0000h - FF1F FFFFh 


FWH_40_EN — R/W. Enables decoding two 1-M Firmware Hub memory ranges. 
0 = Disable. 
1 = Enable the following ranges for the Firmware Hub 

FF40 0000h - FF4F FFFFh 

FFOO 0000h - FFOF FFFFh 





NOTE: This register effects the BIOS decode regardless of whether the BIOS is resident 
on LPC or SPI. The concept of Feature Space does not apply to SPl-based flash. The 
ICH simply decodes these ranges as memory accesses when enabled for the SPI flash 
interface. 
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13.1.30 BIOS CNTL—BIOS Control Register 
(LPC I/ F—D31:F0) 


Offset Address: DCh Attribute: R/WLO, R/W, RO 
Default Value: 00h Size: 8 bit 
Lockable: No Power Well: Core 


Pe te 


7:5 Reserved 


Top Swap Status (TSS) — RO. This bit provides a read-only path to view the state of 
the Top Swap bit that is at offset 3414h, bit 0. 


SPI Read Configuration (SRC) — R/W. This 2-bit field controls two policies related to 
BIOS reads on the SPI interface: 

Bit 3- Prefetch Enable 

Bit 2- Cache Disable 


Settings are summarized below: 


Bits 3:2 Description 


No prefetching, but caching enabled. 64B demand reads load 
00b the read buffer cache with “valid” data, allowing repeated code 
fetches to the same line to complete quickly 


No prefetching and no caching. One-to-one correspondence of 
host BIOS reads to SPI cycles. This value can be used to invalidate 
the cache. 


Prefetching and Caching enabled. This mode is used for long 
sequences of short reads to consecutive addresses (i.e., shadowing). 


Reserved. This is an invalid configuration, caching must be 
enabled when prefetching is enabled. 


BIOS Lock Enable (BLE) — R/WLO. 

0 = Setting the BIOSWE will not cause SMls. 

1 = Enables setting the BIOSWE bit to cause SMIs. Once set, this bit can only be 
cleared by a PLTRST# 


BIOS Write Enable (BIOSWE) — R/W. 

0 = Only read cycles result in Firmware Hub I/F cycles. 

1 = Access to the BIOS space is enabled for both read and write cycles. When this bit is 
written from a 0 to a 1 and BIOS Lock Enable (BLE) is also set, an SMI# is 
generated. This ensures that only SMI code can update BIOS. 
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13.1.31 FDCAP—Feature Detection Capability 1D 
(LPC 1/ F—D31:F0) 


Offset Address: EQOh-Elh Attribute: RO 
Default Value: 0009h Size: 16 bit 
Power Well: Core 


bt 


Next Item Pointer (NEXT) — RO. Configuration offset of the next Capability Item. 


00h indicates the last item in the Capability List. 


Capability ID — RO. Indicates a Vendor Specific Capability 


13.1.32 FDLEN—Feature Detection Capability Length 
(LPC 1/ F—D31:F0) 





Offset Address: E2h Attribute: RO 
Default Value: O0Ch Size: 8 bit 
Power Well: Core 


a 


Capability Length — RO. Indicates the length of this Vendor Specific capability, as 
required by PCI Spec. 





13.11.33 FDVER—Feature Detection Version 
(LPC 1/ F—D31:F0) 


Offset Address: E3h Attribute: RO 
Default Value: 10h Size: 8 bit 
Power Well: Core 


ts 


Vendor- Specific Capability |D — RO. A value of 1h in this 4-bit field identifies this 
Capability as Feature Detection Type. This field allows software to differentiate the 
Feature Detection Capability from other Vendor-Specific capabilities 


Capability Version — RO. This field indicates the version of the Feature Detection 
capability 
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13.1.34 FDVCT—Feature Vector 


13.1.35 


(LPC I/ F—D31:F0) 


Offset Address: E4h-EBh Attribute: RO 
Default Value: See Description Size: 64 bit 
Power Well: Core 


a 
63:39 Reserved 


Intel Active Management Technology Capability — RO. 
38:37 | 00 = Capable 
11 = Disabled 


36:28 Reserved 


Desktop SATA Ports 2 & 3 Capability — RO. 
27 0 = Capable 
1 = Disabled 


iiecdes Reserved 
Only) 


9 Mobile Features Capability— RO. 
(Mobile | 0 = Disabled 
Only) | 1 = Capable 


SATA RAID 0/1/5/10 Capability— RO: 
0 = Capable 
1 = Disabled 


RCBA—Root Complex Base Address Register 
(LPC 1/ F—D31:F0) 


Offset Address: FO-F3h Attribute: R/W 
Default Value: | 00000000h Size: 32 bit 





Description 


31:14 Base Address (BA) — R/W. Base Address for the root complex register block decode 
, range. This address is aligned on a 16-KB boundary. 


13:1 | Reserved 


Enable (EN) — R/W. When set, enables the range specified in BA to be claimed as the 
Root Complex Register Block. 
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Channel 0 DMA Base & Current Address Undefined 


[an [aah | 
04h 
05h 
06h 
07h 


8h 


A 


0 


oO 


h 


0 
0. 
0 
0 
0 
8 


0 


ee) 
= 
= 


co} 0 
WIN 
>| a 


84h- 86h 


94h-96h 


oe) 
Sw 
= 


ay 
fae | 
aed 
eee | 
poet 
Be lh aor | 
a. eed 
en 
iP oh 
pee | 
ee] 
besten al 
poarecte 
ae 
aoe | 
ee 
om] aie | 
ee 


B 
E 
F 
B 
8Ch- 8Eh 
8Fh 
COh 
4 
6 
8 
Cc 


C2h 


h 
h 
h 


oe 
pe | 
za 
ae oe 
a 
i ee 
i 


13h 
14h 
15h 
16h 
17h 
18h 
1Ah 
1Bh 
1Ch 
1Dh 
1Eh 
1Fh 
90h 
91h 
93h 
97h 
98h 
99h 
9Ah 
9Bh 
9Fh 
Clh 
C3h 
C5h 
C7h 
C9h 
CBh 

Dh 


h 
h 
h 
h 
h 
h 
h 


C 


| 16h Channel 3 DMA Base & Current Address Undefined 


| ich | Channel 0-3 DMA Clear Byte Pointer Undefined 
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R/W 
R/W 
R/W 


/ 
/ 


R/W 
R/W 
WO 
wo 
wo 
WO 
WO 
WO 


R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R/W 
R 
R 


/W 
/W 
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Table 13-2. DMA Registers (Sheet 2 of 2) 


[ies [tasers 
DFh 


Channel 4-7 DMA Clear Mask Undefined 


| DFh Channel 4-7 DMA Write All Mask 


13.2.1 DMABASE_CA—DMaA Base and Current Address 
Registers (LPC 1/ F—D31:F0) 


1/O Address: Ch. #0 = 00h; Ch. #1 = 02h Attribute: R/W 








Ch. #2 = 04h; Ch. #3 = O6h Size: 16 bit (per channel), 
Ch. #5 = C4h Ch. #6 = C8h but accessed in two 8-bit 
Ch. #7 = CCh; quantities 

Default Value: Undefined 

Lockable: No Power Well: Core 


Ci a 


Base and Current Address — R/W. This register determines the address for the 
transfers to be performed. The address specified points to two separate registers. On 
writes, the value is stored in the Base Address register and copied to the Current 
Address register. On reads, the value is returned from the Current Address register. 


The address increments/decrements in the Current Address register after each transfer, 
depending on the mode of the transfer. If the channel is in auto-initialize mode, the 


Current Address register will be reloaded from the Base Address register after a 
terminal count is generated. 

For transfers to/from a 16-bit slave (channel’s 5-7), the address is shifted left one bit 
location. Bit 15 will be shifted into Bit 16. 


The register is accessed in 8 bit quantities. The byte is pointed to by the current byte 
pointer flip/flop. Before accessing an address register, the byte pointer flip/flop should 
be cleared to ensure that the low byte is accessed first 
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13.2.2 DMABASE_CC—DMaA Base and Current Count Registers 
(LPC I/ F—D31:F0) 


1/O Address: Ch. #0 = O1h; Ch. #1 = 03h Attribute: R/W 


Ch. #2 = 05h; Ch. #3 = 07h Size: 16-bit (per channel), 
Ch. #5 = C6h; Ch. #6 = CAh but accessed in two 8-bit 
Ch. #7 = CEh; quantities 

Default Value: Undefined 

Lockable: No Power Well: Core 


Pe et 


Base and Current Count — R/W. This register determines the number of transfers to 
be performed. The address specified points to two separate registers. On writes, the 
value is stored in the Base Count register and copied to the Current Count register. On 
reads, the value is returned from the Current Count register. 


The actual number of transfers is one more than the number programmed in the Base 
Count Register (i.e., programming a count of 4h results in 5 transfers). The count is 
decrements in the Current Count register after each transfer. When the value in the 


register rolls from O to FFFFh, a terminal count is generated. If the channel is in auto- 
initialize mode, the Current Count register will be reloaded from the Base Count 
register after a terminal count is generated. 

For transfers to/from an 8-bit slave (channels 0-3), the count register indicates the 
number of bytes to be transferred. For transfers to/from a 16-bit slave (channels 5-7), 
the count register indicates the number of words to be transferred. 

The register is accessed in 8 bit quantities. The byte is pointed to by the current byte 
pointer flip/flop. Before accessing a count register, the byte pointer flip/flop should be 
cleared to ensure that the low byte is accessed first. 





13.2.3 DMAMEM_LP—DMA Memory Low Page Registers 
(LPC I/ F—D31:F0O) 


1/O Address: Ch. #0 = 87h; Ch. #1 = 83h 
Ch. #2 = 81h; Ch. #3 = 82h 
Ch. #5 = 8Bh; Ch. #6 = 89h 


Ch. #7 = 8Ah; Attribute: R/W 
Default Value: Undefined Size: 8-bit 
Lockable: No Power Well: Core 


a 


DMA Low Page (ISA Address bits [23:16]) — R/W. This register works in conjunction 
with the DMA controller's Current Address Register to define the complete 24-bit 


address for the DMA channel. This register remains static throughout the DMA transfer. 
Bit 16 of this register is ignored when in 16 bit 1/O count by words mode as it is 
replaced by the bit 15 shifted out from the current address register. 
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13.2.4 DMACMD—DMA Command Register (LPC I / F—D31:F0) 


1/O Address: Ch. #0-3 = O8h; 


Ch. #4-7 = DOh Attribute: wo 
Default Value: Undefined Size: 8-bit 
Lockable: No Power Well: Core 


a 


7:5 Reserved. Must be 0. 


DMA Group Arbitration Priority — WO. Each channel group is individually assigned 
either fixed or rotating arbitration priority. At part reset, each group is initialized in 


fixed priority. 
0 = Fixed priority to the channel group 
1 = Rotating priority to the group. 


Reserved. Must be 0. 


DMA Channel Group Enable — WO. Both channel groups are enabled following part 
reset. 


0 = Enable the DMA channel group. 
1 = Disable. Disabling channel group 4-7 also disables channel group 0-3, which is 
cascaded through channel 4. 


13.2.5 DMASTA—DMaA Status Register (LPC I / F—D31:F0O) 
1/O Address: Ch. #0-3 = O8h; 





Ch. #4-7 = DOh Attribute: RO 
Default Value: Undefined Size: 8- bit 
Lockable: No Power Well: Core 


Pe einen 


Channel Request Status — RO. When a valid DMA request is pending for a channel, 
the corresponding bit is set to 1. When a DMA request is not pending for a particular 
channel, the corresponding bit is set to 0. The source of the DREQ may be hardware or 
a software request. Note that channel 4 is the cascade channel, so the request status of 
channel 4 is a logical OR of the request status for channels 0 through 3. 

4 = Channel 0 

5 = Channel 1 (5) 

6 = Channel 2 (6) 

7 = Channel 3 (7) 


Channel Terminal Count Status — RO. When a channel reaches terminal count (TC), 
its status bit is set to 1. If TC has not been reached, the status bit is set to 0. Channel 4 
is programmed for cascade, so the TC bit response for channel 4 is irrelevant: 


0 = Channel 0 

1 = Channel 1 (5) 
2 = Channel 2 (6) 
3 = Channel 3 (7) 
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13.2.6 


456 


DMA_WRSMSK—DMaA Write Single Mask Register 
(LPC I/ F—D31:F0) 


1/O Address: Ch. #0-3 = OAh; 


Ch. #4-7 = D4h Attribute: wo 
Default Value: 0000 01xx Size: 8-bit 
Lockable: No Power Well: Core 


Reserved. Must be 0. 


Channel Mask Select — WO. 
2 0 = Enable DREQ for the selected channel. The channel is selected through bits [1:0]. 
Therefore, only one channel can be masked / unmasked at a time. 
1 = Disable DREQ for the selected channel. 


DMA Channel Select — WO. These bits select the DMA Channel Mode Register to 
program. 

00 = Channel 0 (4) 

01 = Channel 1 (5) 

10 = Channel 2 (6) 

11 = Channel 3 (7) 
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13.2.7 





DMACH_MODE—DMaA Channel Mode Register 
(LPC I/ F—D31:F0) 


1/O Address: Ch. #0-3 = OBh; 


Ch. #4-7 = D6h Attribute: wo 
Default Value: 0000 00xx Size: 8- bit 
Lockable: No Power Well: Core 


DMA Transfer Mode — WO. Each DMA channel can be programmed in one of four 
different modes: 


00 = Demand mode 

01 = Single mode 

10 = Reserved 

11 = Cascade mode 

Address I ncrement/ Decrement Select — WO. This bit controls address increment/ 
decrement during DMA transfers. 

0 = Address increment. (default after part reset or Master Clear) 

1 = Address decrement. 

Autoinitialize Enable — WO. 


0 = Autoinitialize feature is disabled and DMA transfers terminate on a terminal count. 
A part reset or Master Clear disables autoinitialization. 

1 = DMA restores the Base Address and Count registers to the current registers 
following a terminal count (TC). 


DMA Transfer Type — WO. These bits represent the direction of the DMA transfer. 
When the channel is programmed for cascade mode, (bits[7:6] = 11) the transfer type 
is irrelevant. 


00 = Verify - No 1/O or memory strobes generated 

01 = Write - Data transferred from the I/O devices to memory 

10 = Read - Data transferred from memory to the I/O device 

11 = Invalid 

DMA Channel Select — WO. These bits select the DMA Channel Mode Register that 
will be written by bits [7:2]. 

00 = Channel 0 (4) 

01 = Channel 1 (5) 

10 = Channel 2 (6) 

11 = Channel 3 (7) 
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13.2.8 


13.2.9 


13.2.10 


458 


DMA Clear Byte Pointer Register (LPC 1/ F—D31:F0) 
I/O Address: Ch. #0-3 = OCh; 


Ch. #4-7 = D8h Attribute: wo 
Default Value: XXXX XXXX Size: 8- bit 
Lockable: No Power Well: Core 


a 


Clear Byte Pointer — WO. No specific pattern. Command enabled with a write to the 
1/O port address. Writing to this register initializes the byte pointer flip/flop to a known 
state. It clears the internal latch used to address the upper or lower byte of the 16-bit 


Address and Word Count Registers. The latch is also cleared by part reset and by the 
Master Clear command. This command precedes the first access to a 16-bit DMA 
controller register. The first access to a 16-bit register will then access the significant 
byte, and the second access automatically accesses the most significant byte. 





DMA Master Clear Register (LPC I / F—D31:FO) 


1/O Address: Ch. #0-3 = ODh; 
Ch. #4-7 = DAh Attribute: wo 
Default Value: XXXX XXXX Size: 8-bit 


a 


Master Clear — WO. No specific pattern. Enabled with a write to the port. This has the 
same effect as the hardware Reset. The Command, Status, Request, and Byte Pointer 
flip/flop registers are cleared and the Mask Register is set. 





DMA_CLMSK—DMaA Clear Mask Register (LPC I/ F—D31:F0) 
1/O Address: Ch. #0-3 = OEh; 


Ch. #4-7 = DCh Attribute: wo 
Default Value: XXXX XXXX Size: 8-bit 
Lockable: No Power Well: Core 


| Bit | Description 





Clear Mask Register — WO. No specific pattern. Command enabled with a write to the 
, port. 
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13.2.11 DMA_WRMSK—DMaA Write All Mask Register 
(LPC I/ F—D31:F0) 


1/O Address: Ch. #0-3 = OFh; 


Ch. #4-7 = DEh Attribute: R/W 
Default Value: 0000 1111 Size: 8-bit 
Lockable: No Power Well: Core 


Pe sino 


7:4 Reserved. Must be 0. 


Channel Mask Bits — R/W. This register permits all four channels to be 
simultaneously enabled/disabled instead of enabling/disabling each channel 
individually, as is the case with the Mask Register - Write Single Mask Bit. In addition, 
this register has a read path to allow the status of the channel mask bits to be read. A 
channel's mask bit is automatically set to 1 when the Current Byte/Word Count Register 
reaches terminal count (unless the channel is in auto-initialization mode). 

3:0 


Setting the bit(s) to a 1 disables the corresponding DREQ(s). Setting the bit(s) to a 0 
enables the corresponding DREQ(s). Bits [3:0] are set to 1 upon part reset or Master 
Clear. When read, bits [3:0] indicate the DMA channel [3:0] ([7:4]) mask status. 

Bit 0 = Channel 0 (4) 1 = Masked, 0 = Not Masked 

Bit 1 = Channel 1 (5) 1 = Masked, 0 = Not Masked 

Bit 2 = Channel 2 (6) 1 = Masked, 0 = Not Masked 

Bit 3 = Channel 3 (7) 1 


7 = Masked, 0 = Not Masked 


NOTE: Disabling channel 4 also disables channels 0-3 due to the cascade of channel’s 
0 - 3 through channel 4. 
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13.3 Timer I/ O Registers (LPC I/ F—D31:F0O) 


Counter 0 Interval Time Status Byte Format | OXXXXXXXb | RO | 
Counter 0 Counter Access Port R/W 
Counter 1 Interval Time Status Byte Format | OXXXXXXXb | RO | 
Counter 1 Counter Access Port R/W 


Counter 2 Interval Time Status Byte Format OXXXXXXXb | RO | 
Counter 2 Counter Access Port Undefined 
Timer Control Word Undefined 
53h Timer Control Word Register XXXXXXXO0b 
Counter Latch Command 
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13.3.1  TCW—Timer Control Word Register (LPC 1/ F—D31:F0) 


1/O Address: 43h Attribute: wo 
Default Value: All bits undefined Size: 8 bits 


This register is programmed prior to any counter being accessed to specify counter 
modes. Following part reset, the control words for each register are undefined and each 
counter output is 0. Each timer must be programmed to bring it into a known state. 


rr ee 


Counter Select — WO. The Counter Selection bits select the counter the control word 
acts upon as shown below. The Read Back Command is selected when bits[7:6] are 
both 1. 


00 = Counter 0 select 

01 = Counter 1 select 

10 = Counter 2 select 

11 = Read Back Command 

Read/ Write Select — WO. These bits are the read/write control bits. The actual 


counter programming is done through the counter port (40h for counter 0, 41h for 
counter 1, and 42h for counter 2). 


00 = Counter Latch Command 

01 = Read/Write Least Significant Byte (LSB) 
10 = Read/Write Most Significant Byte (MSB) 
11 = Read/Write LSB then MSB 


Counter Mode Selection — WO. These bits select one of six possible modes of 
operation for the selected counter. 


Bit Value Mode 
000b Mode 0 Out signal on end of count (=0) 
001b Mode 1 Hardware retriggerable one-shot 
x10b Mode 2 Rate generator (divide by n counter) 
x11b Mode 3 Square wave output 
100b Mode 4 Software triggered strobe 
101b Mode 5 Hardware triggered strobe 


Binary/BCD Countdown Select — WO. 
0 = Binary countdown is used. The largest possible binary count is 216 
1 = Binary coded decimal (BCD) count is used. The largest possible BCD count is 104 





There are two special commands that can be issued to the counters through this 
register, the Read Back Command and the Counter Latch Command. When these 
commands are chosen, several bits within this register are redefined. These register 
formats are described below: 
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13.3.2 RDBK_CMD—Read Back Command (LPC I/ F—D31:F0) 


The Read Back Command is used to determine the count value, programmed mode, 
and current states of the OUT pin and Null count flag of the selected counter or 
counters. Status and/or count may be latched in any or all of the counters by selecting 
the counter during the register write. The count and status remain latched until read, 
and further latch commands are ignored until the count is read. Both count and status 
of the selected counters may be latched simultaneously by setting both bit 5 and bit 4 
to 0. If both are latched, the first read operation from that counter returns the latched 
status. The next one or two reads, depending on whether the counter is programmed 
for one or two byte counts, returns the latched count. Subsequent reads return an 
unlatched count. 


7:6 Read Back Command. Must be 11 to select the Read Back Command 


a 


Latch Count of Selected Counters. 

0 = Current count value of the selected counters will be latched 
1 = Current count will not be latched 

Latch Status of Selected Counters. 

0 = Status of the selected counters will be latched 

1 = Status will not be latched 


Counter 2 Select. 
1 = Counter 2 count and/or status will be latched 


Counter 1 Select. 
1 = Counter 1 count and/or status will be latched 


Counter O Select. 
1 = Counter O count and/or status will be latched. 


| 0 | Reserved. Must be 0. 


LTCH_CMD—Counter Latch Command (LPC I/ F—D31:F0) 





The Counter Latch Command latches the current count value. This command is used to 
insure that the count read from the counter is accurate. The count value is then read 
from each counter's count register through the Counter Ports Access Ports Register 
(40h for counter 0, 41h for counter 1, and 42h for counter 2). The count must be read 
according to the programmed format, i.e., if the counter is programmed for two byte 
counts, two bytes must be read. The two bytes do not have to be read one right after 
the other (read, write, or programming operations for other counters may be inserted 
between the reads). If a counter is latched once and then latched again before the 
count is read, the second Counter Latch Command is ignored. 


a 


Counter Selection. These bits select the counter for latching. If “11” is written, then 
the write is interpreted as a read back command. 


00 = Counter 0 
01 = Counter 1 


10 = Counter 2 


5:4 Counter Latch Command. 
; 00 = Selects the Counter Latch Command. 


Reserved. Must be 0. 
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13.3.3 





SBYTE_FMT—Interval Timer Status Byte Format Register 
(LPC I1/ F—D31:F0) 


1/O Address: Counter 0 = 40h, 

Counter 1 = 41h, Attribute: RO 

Counter 2 = 42h Size: 8 bits per counter 
Default Value: Bits[6:0] undefined, Bit 7=0 


Each counter's status byte can be read following a Read Back Command. If latch status 
is chosen (bit 4=0, Read Back Command) as a read back option for a given counter, the 
next read from the counter's Counter Access Ports Register (40h for counter 0, 41h for 
counter 1, and 42h for counter 2) returns the status byte. The status byte returns the 
following: 


a 


Counter OUT Pin State — RO. 


0 = OUT pin of the counter is also a 0 
1 = OUT pin of the counter is also a 1 


Count Register Status — RO. This bit indicates when the last count written to the 

Count Register (CR) has been loaded into the counting element (CE). The exact time 

this happens depends on the counter mode, but until the count is loaded into the 

counting element (CE), the count value will be incorrect. 

0 = Count has been transferred from CR to CE and is available for reading. 

1 = Null Count. Count has not been transferred from CR to CE and is not yet available 
for reading. 


Read/ Write Selection Status — RO. These reflect the read/write selection made 
through bits[5:4] of the control register. The binary codes returned during the status 
read match the codes used to program the counter read/write selection. 


00 = Counter Latch Command 


01 = Read/Write Least Significant Byte (LSB) 
10 = Read/Write Most Significant Byte (MSB) 
11 = Read/Write LSB then MSB 


Mode Selection Status — RO. These bits return the counter mode programming. The 
binary code returned matches the code used to program the counter mode, as listed 
under the bit function above. 


000 = Mode 0 — Out signal on end of count (=0) 

001 = Mode 1 — Hardware retriggerable one-shot 
x10 = Mode 2 — Rate generator (divide by n counter) 
x11 = Mode 3 — Square wave output 

100 = Mode 4 — Software triggered strobe 

101 = Mode 5 — Hardware triggered strobe 


Countdown Type Status — RO. This bit reflects the current countdown type. 


0 = Binary countdown 
1 = Binary Coded Decimal (BCD) countdown. 
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13.3.4 (Counter Access Ports Register (LPC | / F—D31:F0) 


1/O Address: Counter 0 - 40h, 


Counter 1 - 41h, Attribute: R/W 
Counter 2 - 42h 
Default Value: All bits undefined Size: 8 bit 


a 


Counter Port — R/W. Each counter port address is used to program the 16-bit Count 
Register. The order of programming, either LSB only, MSB only, or LSB then MSB, is 


defined with the Interval Counter Control Register at port 43h. The counter port is also 
used to read the current count from the Count Register, and return the status of the 
counter programming following a Read Back Command. 
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13.4 8259 Interrupt Controller (PIC) Registers 
(LPC |/ F—D31:F0) 


13.4.1 Interrupt Controller |/O MAP (LPC I/ F—D31:F0) 


The interrupt controller registers are located at 20h and 21h for the master controller 
(IRQ 0-7), and at AOh and Ath for the slave controller (IRQ 8-13). These registers 
have multiple functions, depending upon the data written to them. Table 13-3 shows 
the different register possibilities for each address. 


Table 13-3. PIC Registers (LPC |/ F—D31:FO) 


. Default 


" 


Note: Refer to note addressing active-low interrupt sources in 8259 Interrupt Controllers 
section (Chapter 5.8). 
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13.4.2 


466 


1 CW1—I nitialization Command Word 1 Register 
(LPC I/ F—D31:FO) 
Offset Address: Master Controller - 20h Attribute: WO 


Slave Controller - AOh Size: 8 bit /controller 
Default Value: All bits undefined 


A write to Initialization Command Word 1 starts the interrupt controller initialization 
sequence, during which the following occurs: 

1. The Interrupt Mask register is cleared. 

2. IRQ7 input is assigned priority 7. 

3. The slave mode address is set to 7. 

4. Special mask mode is cleared and Status Read is set to IRR. 


Once this write occurs, the controller expects writes to |CW2, |CW3, and |CW4 to 
complete the initialization sequence. 


ICW/ OCW Select — WO. These bits are MCS-85 specific, and not needed. 

000 = Should be programmed to “000” 

ICW/ OCW Select — WO. 

1 = This bit must be a 1 to select |CW1 and enable the |CW2, ICW3, and |CW4 
sequence. 


> re Edge/ Level Bank Select (LTIM) — WO. Disabled. Replaced by the edge/level 


—— control registers (ELCR, D31:F0:4D0h, D31:FO:4D1h). 


0= abies) for the ICH9. Should be programmed to 0. 
Single or Cascade (SNGL) — WO. 
0 = Must be programmed to a 0 to indicate two controllers operating in cascade mode. 


1CW4 Write Required (1C4) — WO. 
1 = This bit must be programmed to a 1 to indicate that |CW4 needs to be 
programmed. 
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13.4.3 


1 CW2—I nitialization Command Word 2 Register 
(LPC |/ F—D31:F0) 


Offset Address: Master Controller - 21h Attribute: wo 
Slave Controller - Alh Size: 8 bit /controller 
Default Value: — All bits undefined 


ICW2 is used to initialize the interrupt controller with the five most significant bits of 
the interrupt vector address. The value programmed for bits[7:3] is used by the 
processor to define the base address in the interrupt vector table for the interrupt 
routines associated with each IRQ on the controller. Typical ISA |CW2 values are 08h 
for the master controller and 70h for the slave controller. 


Ls 


Interrupt Vector Base Address — WO. Bits [7:3] define the base address in the 
interrupt vector table for the interrupt routines associated with each interrupt request 
level input. 


Interrupt Request Level — WO. When writing |CW2, these bits should all be 0. 
During an interrupt acknowledge cycle, these bits are programmed by the interrupt 
controller with the interrupt to be serviced. This is combined with bits [7:3] to form the 
interrupt vector driven onto the data bus during the second INTA# cycle. The code is a 
three bit binary code: 


Code Master Interrupt Slave Interrupt 
000b IRQO IRQ8 
001b IRQ1 IRQ9 
010b IRQ2 IRQ10 
011b IRQ3 IRQ11 
100b IRQ4 IRQ12 
101b IRQ5 IRQ13 
110b IRQ6 IRQ14 
111b IRQ7 IRQ15 
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13.4.4 1 CW3—Master Controller Initialization Command 
Word 3 Register (LPC I|/ F—D31:F0) 


Offset Address: 21h Attribute: wo 
Default Value: All bits undefined Size: 8 bits 


oe Teaser 
0 = These bits must be programmed to 0. 


Cascaded Interrupt Controller |RQ Connection — WO. This bit indicates that the 
slave controller is cascaded on IRQ2. When IRQ8#-IRQ15 is asserted, it goes through 
the slave controller’s priority resolver. The slave controller’s INTR output onto IRQ2. 


IRQ2 then goes through the master controller’s priority solver. If it wins, the INTR 
signal is asserted to the processor, and the returning interrupt acknowledge returns the 
interrupt vector for the slave controller. 

1 = This bit must always be programmed to a 1. 


1:0 | 0 = These bits must be programmed to 0. 





13.4.5 | CW3—Slave Controller I nitialization Command 
Word 3 Register (LPC I|/ F—D31:F0) 


Offset Address: Alh Attribute: wo 
Default Value: = All bits undefined Size: 8 bits 


0 = These bits must be programmed to 0. 


Slave I dentification Code — WO. These bits are compared against the slave 


identification code broadcast by the master controller from the trailing edge of the first 
internal INTA# pulse to the trailing edge of the second internal INTA# pulse. These bits 
must be programmed to 02h to match the code broadcast by the master controller. 
When 02h is broadcast by the master controller during the INTA# sequence, the slave 
controller assumes responsibility for broadcasting the interrupt vector. 
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13.4.6 | CW4—I nitialization Command Word 4 Register 
(LPC |/ F—D31:F0) 


Offset Address: Master Controller - 021h Attribute: wo 
Slave Controller - OA1Lh Size: 8 bits 
Default Value: O1h 


Pe et 


0 = These bits must be programmed to 0. 


Special Fully Nested Mode (SFNM) — WO. 
0 = Should normally be disabled by writing a 0 to this bit. 
1 = Special fully nested mode is programmed. 
3 Buffered Mode (BUF) — WO. 
0 = Must be programmed to 0 for the ICH9. This is non-buffered mode. 
5 Master/ Slave in Buffered Mode — WO. Not used. 
0 = Should always be programmed to 0. 
Automatic End of Interrupt (AEOI) — WO. 
1 0 = This bit should normally be programmed to 0. This is the normal end of interrupt. 
1 = Automatic End of Interrupt (AEOI) mode is programmed. 


Microprocessor Mode — WO. 
1 = Must be programmed to 1 to indicate that the controller is operating in an Intel 
Architecture-based system. 





13.4.7 OCW1—Operational Control Word 1 (Interrupt Mask) 
Register (LPC 1/ F—D31:F0) 


Offset Address: Master Controller - 021h Attribute: R/W 
Slave Controller - OA1Lh Size: 8 bits 
Default Value: 00h 


a 


Interrupt Request Mask — R/W. When a 1 is written to any bit in this register, the 
corresponding IRQ line is masked. When a 0 is written to any bit in this register, the 


corresponding IRQ mask bit is cleared, and interrupt requests will again be accepted by 
the controller. Masking |RQ2 on the master controller will also mask the interrupt 
requests from the slave controller. 
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13.4.8 OCW2—Operational Control Word 2 Register 
(LPC 1/ F—D31:F0) 


Offset Address: Master Controller - 020h Attribute: wo 
Slave Controller - OAOh Size: 8 bits 
Default Value: Bit[4:0]=undefined, Bit[7:5]=001 


Following a part reset or ICW initialization, the controller enters the fully nested mode 
of operation. Non-specific EO! without rotation is the default. Both rotation mode and 
specific EOI mode are disabled following initialization. 


a 


Rotate and EOI Codes (R, SL, EOI) — WO. These three bits control the Rotate and 
End of Interrupt modes and combinations of the two. 


000 = Rotate in Auto EOI Mode (Clear) 

001 = Non-specific EO! command 

010 = No Operation 

011 = *Specific EO! Command 

100 = Rotate in Auto EOI Mode (Set) 

101 = Rotate on Non-Specific EO! Command 
110 = *Set Priority Command 

111 = *Rotate on Specific EO! Command 
*LO - L2 Are Used 


OCW?2 Select — WO. When selecting OCW2, bits 4:3 = “00” 


Interrupt Level Select (L2, L1, LO) — WO. L2, L1, and LO determine the interrupt 
level acted upon when the SL bit is active. A simple binary code, outlined below, selects 
the channel for the command to act upon. When the SL bit is inactive, these bits do not 
have a defined function; programming L2, L1 and LO to 0 is sufficient in this case. 


Code Interrupt Level Code Interrupt Level 
000b IRQO/8 000b IRQ4/12 
001b IRQ1/9 001b IRQ5/13 
010b 1RQ2/10 010b IRQ6/14 
011b IRQ3/11 011b IRQ7/15 
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13.4.9 OCW3—Operational Control Word 3 Register 
(LPC I1/ F—D31:F0) 


Offset Address: Master Controller - 020h Attribute: wo 
Slave Controller - OAOh Size: 8 bits 
Default Value: Bit[6,0]=0, Bit[ 7,4: 2]=undefined, 
Bit[5,1]=1 


Reserved. Must be 0. 


Special Mask Mode (SMM) — WO. 

1 = The Special Mask Mode can be used by an interrupt service routine to dynamically 
alter the system priority structure while the routine is executing, through selective 
enabling/disabling of the other channel's mask bits. Bit 5, the ESMM bit, must be 
set for this bit to have any meaning. 


Enable Special Mask Mode (ESMM) — WO. 


0 = Disable. The SMM bit becomes a “don't care”. 
1 = Enable the SMM bit to set or reset the Special Mask Mode. 


0 = Disable. Poll Command is not issued. 

1 = Enable. The next I/O read to the interrupt controller is treated as an interrupt 
acknowledge cycle. An encoded byte is driven onto the data bus, representing the 
highest priority level requesting service. 


Register Read Command — WO. These bits provide control for reading the In-Service 
Register (ISR) and the Interrupt Request Register (IRR). When bit 1=0, bit 0 will not 
affect the register read selection. When bit 1=1, bit 0 selects the register status 
returned following an OCW3 read. If bit O=0, the IRR will be read. If bit O=1, the ISR 
will be read. Following ICW initialization, the default OCW3 port address read will be 
“read IRR”. To retain the current selection (read ISR or read IRR), always write a 0 to 
bit 1 when programming this register. The selected register can be read repeatedly 
without reprogramming OCW3. To select a new status register, OCW3 must be 
reprogrammed prior to attempting the read. 
00 = No Action 

= No Action 

Read IRQ Register 
= Read IS Register 
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13.4.10 ELCR1—Master Controller Edge/ Level Triggered Register 
(LPC |/ F—D31:FO) 


Offset Address: 4D0h Attribute: R/W 
Default Value: 00h Size: 8 bits 


In edge mode, (bit[x] = 0), the interrupt is recognized by a low to high transition. In 
level mode (bit[x] = 1), the interrupt is recognized by a high level. The cascade 
channel, |RQ2, the heart beat timer (I[RQO), and the keyboard controller (IRQ1), 
cannot be put into level mode. 


a 


IRQ7 ECL — R/W. 
0 = Edge. 
1 = Level. 
IRQ6 ECL — R/W. 
0 = Edge. 
1 = Level. 


IRQ5 ECL — R/W. 


0 = Edge. 
1 = Level. 


IRQ4 ECL — R/W. 
0 = Edge. 
1 = Level. 
IRQ3 ECL — R/W. 
0 = Edge. 
1 = Level. 


2:0 Reserved. Must be 0. 
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13.4.11 ELCR2—Slave Controller Edge/ Level Triggered Register 
(LPC I/ F—D31:F0) 


Offset Address: 4D1h Attribute: R/W 
Default Value: 00h Size: 8 bits 


In edge mode, (bit[x] = 0), the interrupt is recognized by a low to high transition. In 


level mode (bit[x] = 1), the interrupt is recognized by a high level. The real time clock, 
IRQ8#, and the floating point error interrupt, 1RQ13, cannot be programmed for level 


mode. 


IRQ15 ECL — R/W. 





Reserved. Must be 0. 
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Table 13-4. 


Table 13-5. 


13.5.2 


474 


Advanced Programmable Interrupt Controller 
(API C)(D31:FO) 


APIC Register Map (LPC I/ F—D31:F0) 


The APIC is accessed via an indirect addressing scheme. Two registers are visible by 
software for manipulation of most of the APIC registers. These registers are mapped 
into memory space. The address bits 15:12 of the address range are programmable 
through bit 7:4 of OIC register (Chipset Configuration Register, offset 31FFh.) The 
registers are shown in Table 13-4. 


APIC Direct Registers (LPC I|/ F—D31:F0) 


[Aare [renone | fegitermine | Sm | Tee 


Table 13-5 lists the registers which can be accessed within the APIC via the Index 
Register. When accessing these registers, accesses must be done one dword at a time. 
For example, software should never access byte 2 from the Data register before 
accessing bytes 0 and 1. The hardware will not attempt to recover from a bad 
programming model in this case. 





APIC Indirect Registers (LPC I/ F—D31:F0) 


[tadex_[ remonie | __nenstername [aie [Toe 
[ee cercaton is 
[or [ven resin «i as 
[eo [seve SCS 
ce (a) 
par [= [fees SCC 


I ND—I ndex Register (LPC 1/ F—D31:F0) 


Memory Address FECO_0000h Attribute: R/W 
Default Value: 00h Size: 8 bits 





The Index Register will select which APIC indirect register to be manipulated by 
software. The selector values for the indirect registers are listed in Table 13-5. Software 
will program this register to select the desired APIC internal register 


a 





APIC Index — R/W. This is an 8-bit pointer into the 1/O APIC register table. 
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13.903 


13.5.4 


Note: 


Note: 


DAT—Data Register (LPC 1/ F—D31:F0O) 


Memory Address FECO_0010h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This is a 32-bit register specifying the data to be read or written to the register pointed 
to by the Index register. This register can only be accessed in dword quantities. 


a 


APIC Data — R/W. This is a 32-bit register for the data to be read or written to the 


APIC indirect register (Figure 13-5) pointed to by the Index register (Memory Address 
FECO_0000h). 





EOIR—EOI Register (LPC |/ F—D31:F0O) 


Memory Address FECOh_0040h Attribute: WO 
Default Value: N/A Size: 32 bits 


The EOI register is present to provide a mechanism to maintain the level triggered 
semantics for level-triggered interrupts issued on the parallel bus. 


When a write is issued to this register, the 1/O APIC will check the lower 8 bits written 
to this register, and compare it with the vector field for each entry in the 1/O 
Redirection Table. When a match is found, the Remote_IRR bit (Index Offset 10h, bit 
14) for that |/O Redirection Entry will be cleared. 


If multiple |/O Redirection entries, for any reason, assign the same vector for more 
than one interrupt input, each of those entries will have the Remote_IRR bit reset to 0. 
The interrupt which was prematurely reset will not be lost because if its input remained 
active when the Remote_IRR bit is cleared, the interrupt will be reissued and serviced 
at a later time. Note: Only bits 7:0 are actually used. Bits 31:8 are ignored by the 
ICH9. 


To provide for future expansion, the processor should always write a value of 0 to Bits 


31:8. 
Reserved. To provide for future expansion, the processor should always write a value of 
0 to Bits 31:8. 


will check this field, and compare it with the vector field for each entry in the |/O 
Redirection Table. When a match is found, the Remote_IRR bit for that I/O Redirection 
Entry will be cleared. 


pe Redirection Entry Clear — WO. When a write is issued to this register, the |/O APIC 
7:0 
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13.5.5 | D—I dentification Register (LPC | / F—D31:F0) 


Index Offset: 00h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


The APIC ID serves as a physical name of the APIC. The APIC bus arbitration ID for the 
APIC is derived from its |/O APIC ID. This register is reset to 0 on power-up reset. 


ee 
27:24 | APIC 1D — R/W. Software must program this value before using the APIC. 


Scratchpad Bit. 


13.5.6 VER—Version Register (LPC |/ F—D31:F0) 


Index Offset: O1lh Attribute: RO, RWO 
Default Value: 00170020h Size: 32 bits 





Each 1/O APIC contains a hardwired Version Register that identifies different 
implementation of APIC and their versions. The maximum redirection entry information 
also is in this register, to let software know how many interrupt are supported by this 
APIC. 


a 


Maximum Redirection Entries (MRE) — RWO. This is the entry number (0 being the 

lowest entry) of the highest entry in the redirection table. It is equal to the number of 

interrupt input pins minus one and is in the range 0 through 239. In the |CH9 this field 
23:16 


is hardwired to 17h to indicate 24 interrupts. 
BIOS must write to this field after PLTRST# to lockdown the value. this allows BIOS to 


utilize some of the entries for its own purpose and thus advertising fewer | OxAPIC 
Redirection Entries to the OS. 


15 Pin Assertion Register Supported (PRQ) — RO. Indicate that the |OxAPIC does not 
implement the Pin Assertion Register. 
Version (VS) — RO. This is a version number that identifies the implementation 
, version. 





476 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


i ® 
LPC Interface Bridge Registers (D31:FO) j n tel 


13.5.7 REDIR_TBL—Redirection Table (LPC I/ F—D31:F0) 


Index Offset: 10h-11h (vector 0) through Attribute: R/W, RO 
3E-3Fh (vector 23) 
Default Value: Bit 16 = 1. All other bits undefined Size: 64 bits each, (accessed 
as two 32 bit quantities) 


The Redirection Table has a dedicated entry for each interrupt input pin. The 
information in the Redirection Table is used to translate the interrupt manifestation on 
the corresponding interrupt pin into an APIC message. 


The APIC will respond to an edge triggered interrupt as long as the interrupt is held 
until after the acknowledge cycle has begun. Once the interrupt is detected, a delivery 
status bit internally to the |/O APIC is set. The state machine will step ahead and wait 
for an acknowledgment from the APIC unit that the interrupt message was sent. Only 
then will the |/O APIC be able to recognize a new edge on that interrupt pin. That new 
edge will only result in a new invocation of the handler if its acceptance by the 
destination APIC causes the Interrupt Request Register bit to go from 0 to 1. 

(In other words, if the interrupt was not already pending at the destination.) 


7 rr ee 


Destination — R/W. If bit 11 of this entry is 0 (Physical), then bits 59:56 specifies an 
APIC ID. In this case, bits 63:59 should be programmed by software to 0. 

If bit 11 of this entry is 1 (Logical), then bits 63:56 specify the logical destination 
address of a set of processors. 


55:48 Extended Destination |D (EDID) — RO. These bits are sent to a local APIC only 
, when in Processor System Bus mode. They become bits 11:4 of the address. 


Mask — R/W. 

0 = Not masked: An edge or level on this interrupt pin results in the delivery of the 
interrupt to the destination. 

1 = Masked: Interrupts are not delivered nor held pending. Setting this bit after the 
interrupt is accepted by a local APIC has no effect on that interrupt. This behavior 
is identical to the device withdrawing the interrupt before it is posted to the 
processor. It is software's responsibility to deal with the case where the mask bit is 
set after the interrupt message has been accepted by a local APIC unit but before 
the interrupt is dispensed to the processor. 


63:56 


Trigger Mode — R/W. This field indicates the type of signal on the interrupt pin that 
triggers an interrupt. 


Remote IRR — R/W. This bit is used for level triggered interrupts; its meaning is 
undefined for edge triggered interrupts. 

0 = Reset when an EOI message is received from a local APIC. 

1 = Set when Local APIC/s accept the level interrupt sent by the I/O APIC. 


Interrupt Input Pin Polarity — R/W. This bit specifies the polarity of each interrupt 
signal connected to the interrupt pins. 

0 = Active high. 

1 = Active low. 

Delivery Status — RO. This field contains the current status of the delivery of this 
interrupt. Writes to this bit have no effect. 


0 = Idle. No activity for this interrupt. 
1 = Pending. Interrupt has been injected, but delivery is not complete. 





15 
0 = Edge triggered. 
1 = Level triggered. 
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7:0 


NOTE: 


000 = 


001 


010 


011 = 
100 


101 


110 
111 = 


LPC Interface Bridge Registers (D31:FO) 


Destination Mode — R/W. This field determines the interpretation of the Destination 

field. 

0 = Physical. Destination APIC ID is identified by bits 59:56. 

1 = Logical. Destinations are identified by matching bit 63:56 with the Logical 
Destination in the Destination Format Register and Logical Destination Register in 
each Local APIC. 


Delivery Mode — R/W. This field specifies how the APICs listed in the destination field 
should act upon reception of this signal. Certain Delivery Modes will only operate as 
intended when used in conjunction with a specific trigger mode. These encodings are 
listed in the note below: 





Vector — R/W. This field contains the interrupt vector for this interrupt. Values range 
between 10h and FEh. 


Delivery Mode encoding: 


Fixed. Deliver the signal on the INTR signal of all processor cores listed in the destination. 
Trigger Mode can be edge or level. 


Lowest Priority. Deliver the signal on the INTR signal of the processor core that is 
executing at the lowest priority among all the processors listed in the specified 
destination. Trigger Mode can be edge or level. 

SMI (System Management Interrupt). Requires the interrupt to be programmed as edge 
triggered. The vector information is ignored but must be programmed to all Os for future 
compatibility: not supported 

Reserved 


NMI. Deliver the signal on the NMI signal of all processor cores listed in the destination. 
Vector information is ignored. NMI is treated as an edge triggered interrupt even if it is 
programmed as level triggered. For proper operation this redirection table entry must be 
programmed to edge triggered. The NMI delivery mode does not set the RIRR bit. If the 
redirection table is incorrectly set to level, the loop count will continue counting through 
the redirection table addresses. Once the count for the NMI pin is reached again, the 
interrupt will be sent again: not supported 

INIT. Deliver the signal to all processor cores listed in the destination by asserting the 
INIT signal. All addressed local APICs will assume their INIT state. INIT is always treated 
as an edge triggered interrupt even if programmed as level triggered. For proper 
operation this redirection table entry must be programmed to edge triggered. The INIT 
delivery mode does not set the RIRR bit. If the redirection table is incorrectly set to level, 
the loop count will continue counting through the redirection table addresses. Once the 
count for the INIT pin is reached again, the interrupt will be sent again: not supported 
Reserved 


ExtI NT. Deliver the signal to the INTR signal of all processor cores listed in the destination 
as an interrupt that originated in an externally connected 8259A compatible interrupt 
controller. The INTA cycle that corresponds to this ExtINT delivery will be routed to the 
external controller that is expected to supply the vector. Requires the interrupt to be 
programmed as edge triggered. 
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13.6 


13.6.1 


Table 13-6. 


Real Time Clock Registers 


|1/ O Register Address Map 


The RTC internal registers and RAM are organized as two banks of 128 bytes each, 
called the standard and extended banks. The first 14 bytes of the standard bank 
contain the RTC time and date information along with four registers, A-D, that are used 
for configuration of the RTC. The extended bank contains a full 128 bytes of battery 
backed SRAM, and will be accessible even when the RTC module is disabled (via the 
RTC configuration register). Registers A-D do not physically exist in the RAM. 


All data movement between the host processor and the real-time clock is done through 
registers mapped to the standard I/O space. The register map appears in Table 13-6. 


RTC I/ O Registers 


Locations 


70h and 74h | Also alias to 72h and 76h | Real-Time Clock (Standard RAM) Index Register 


71h and 75h | Also alias to 73h and 77h | Real-Time Clock (Standard RAM) Target Register 
72h and 76h Po Extended RAM Index Register (if enabled) 
73h and 77h Po Extended RAM Target Register (if enabled) 


NOTES: 


1. I/O locations 70h and 71h are the standard legacy location for the real-time clock. 
The map for this bank is shown in Table 13-7. Locations 72h and 73h are for 
accessing the extended RAM. The extended RAM bank is also accessed using an 
indexed scheme. I/O address 72h is used as the address pointer and I/O address 
73h is used as the data register. Index addresses above 127h are not valid. If the 
extended RAM is not needed, it may be disabled. 


2. Software must preserve the value of bit 7 at |/O addresses 70h and 74h. When 
writing to this address, software must first read the value, and then write the same 
value for bit 7 during the sequential address write. Note that port 70h is not 
directly readable. The only way to read this register is through Alt Access mode. 
Although RTC Index bits 6:0 are readable from port 74h, bit 7 will always return 0. 
If the NMI# enable is not changed during normal operation, software can 
alternatively read this bit once and then retain the value for all subsequent writes 
to port 70h. 
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13.6.2 Indexed Registers 


The RTC contains two sets of indexed registers that are accessed using the two 
separate Index and Target registers (70/71h or 72/73h), as shown in Table 13-7. 


Table 13-7. RTC (Standard) RAM Bank 


ee ee 
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13.6.2.1 RTC_REGA—Register A 


RTC Index: 0A Attribute: R/W 
Default Value: Undefined Size: 8-bit 
Lockable: No Power Well: RTC 


This register is used for general configuration of the RTC functions. None of the bits 
are affected by RSMRST#¥ or any other |ICH9 reset signal. 


a 


Update In Progress (UIP) — R/W. This bit may be monitored as a status flag. 


0 = The update cycle will not start for at least 488 us. The time, calendar, and alarm 
information in RAM is always available when the UIP bit is 0. 
1 = The update is soon to occur or is in progress. 


Division Chain Select (DV[2:0]) — R/W. These three bits control the divider chain 
for the oscillator, and are not affected by RSMRST# or any other reset signal. 
DV2 corresponds to bit 6. 


010 = Normal Operation 

11X = Divider Reset 

101 = Bypass 15 stages (test mode only) 

100 = Bypass 10 stages (test mode only) 

011 = Bypass 5 stages (test mode only) 

001 = Invalid 

000 = Invalid 

Rate Select (RS[3:0]) — R/W. Selects one of 13 taps of the 15 stage divider chain. 
The selected tap can generate a periodic interrupt if the PIE bit is set in Register B. 


Otherwise this tap will set the PF flag of Register C. If the periodic interrupt is not to be 
used, these bits should all be set to 0. RS3 corresponds to bit 3. 


0000 = Interrupt never toggles 
0001 = 3.90625 ms 
0010 = 7.8125 ms 
0011 = 122.070 us 
0100 = 244.141 us 
0101 = 488.281 us 
0110 = 976.5625 us 
0111 = 1.953125 ms 
1000 = 3.90625 ms 
1001 = 7.8125 ms 
1010 = 15.625 ms 
1011 = 31.25 ms 
1100 = 62.5 ms 
1101 = 125 ms 

1110 = 250 ms 
1111= 500 ms 
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13.6.2.2 RTC_REGB—Register B (General Configuration) 


RTC Index: OBh Attribute: R/W 
Default Value: UOQUOOUUU (U: Undefined) Size: 8- bit 
Lockable: No Power Well: RTC 


ee 


Update Cycle I nhibit (SET) — R/W. Enables/Inhibits the update cycles. This bit is not 

affected by RSMRST# nor any other reset signal. 

0 = Update cycle occurs normally once each second. 

1 = A current update cycle will abort and subsequent update cycles will not occur until 
SET is returned to 0. When set is one, the BIOS may initialize time and calendar 
bytes safely. 


NOTE: This bit should be set then cleared early in BIOS POST after each powerup 
directly after coin-cell battery insertion. 


Periodic Interrupt Enable (PIE) — R/W. This bit is cleared by RSMRST#, but not on 

any other reset. 

0 = Disable. 

1 = Enable. Allows an interrupt to occur with a time base set with the RS bits of register 
A. 


Alarm Interrupt Enable (AIE) — R/W. This bit is cleared by RTCRST#, but not on any 

other reset. 

0 = Disable. 

1 = Enable. Allows an interrupt to occur when the AF is set by an alarm match from the 
update cycle. An alarm can occur once a second, one an hour, once a day, or one a 
month. 


Update-Ended Interrupt Enable (UIE) — R/W. This bit is cleared by RSMRST#, but 
not on any other reset. 

0 = Disable. 

1 = Enable. Allows an interrupt to occur when the update cycle ends. 


Square Wave Enable (SQWE) — R/W. This bit serves no function in the ICH9. It is 
left in this register bank to provide compatibility with the Motorola 146818B. The ICH9 
has no SQW pin. This bit is cleared by RSMRST#, but not on any other reset. 


Data Mode (DM) — R/W. This bit specifies either binary or BCD data representation. 
This bit is not affected by RSMRST# nor any other reset signal. 

0 = BCD 

1 = Binary 

Hour Format (HOURFORM) — R/W. This bit indicates the hour byte format. This bit is 
not affected by RSMRST# nor any other reset signal. 


0 = Twelve-hour mode. In twelve-hour mode, the seventh bit represents AM as 0 and 
PM as one. 
1 = Twenty-four hour mode. 


Daylight Savings Legacy Software Support (DSLSWS) — R/W. Daylight savings 
functionality is no longer supported. This bit is used to maintain legacy software 
support and has no associated functionality. If BUC.DSO bit is set, the DSLSWS bit 
continues to be R/W. 
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13.6.2.3 RTC_REGC—Register C (Flag Register) 


RTC Index: 0Ch Attribute: RO 
Default Value: O0OU00000 (U: Undefined) Size: 8- bit 
Lockable: No Power Well: RTC 


Writes to Register C have no effect. 


Lt 


Interrupt Request Flag (IRQF) — RO. |IRQF = (PF * PIE) + (AF * AIE) + (UF *UFE). 
This bit also causes the RTC Interrupt to be asserted. This bit is cleared upon RSMRST# 
or a read of Register C. 


Periodic Interrupt Flag (PF) — RO. This bit is cleared upon RSMRST# or a read of 
Register C. 


0 = If no taps are specified via the RS bits in Register A, this flag will not be set. 

1 = Periodic interrupt Flag will be 1 when the tap specified by the RS bits of register A is 
de 

Alarm Flag (AF) — RO. 

0 = This bit is cleared upon RTCRST# or a read of Register C. 

1 = Alarm Flag will be set after all Alarm values match the current time. 

Update-Ended Flag (UF) — RO. 


0 = The bit is cleared upon RSMRST# or a read of Register C. 
1 = Set immediately following an update cycle for each second. 


3:0 | Reserved. Will always report 0. 


13.6.2.4 RTC_REGD—Register D (Flag Register) 





RTC Index: ODh Attribute: R/W 
Default Value: 1QUUUUUU (U: Undefined) Size: 8- bit 
Lockable: No Power Well: RTC 


a 


Valid RAM and Time Bit (VRT) — R/W. 

0 = This bit should always be written as a 0 for write cycle, however it will return a 1 for 
read cycles. 

1 = This bit is hardwired to 1 in the RTC power well. 


| 6 | Reserved. This bit always returns a 0 and should be set to O for write cycles. 


Date Alarm — R/W. These bits store the date of month alarm value. If set to O0O0000b, 
then a don’t care state is assumed. The host must configure the date alarm for these 
bits to do anything, yet they can be written at any time. If the date alarm is not 
enabled, these bits will return Os to mimic the functionality of the Motorola 146818B. 
These bits are not affected by any reset assertion. 
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13.7 Processor I nterface Registers (LPC I|/ F—D31:F0) 


Table 13-8 is the register address map for the processor interface registers. 


Table 13-8. Processor Interface PCI Register Address Map (LPC |/ F—D31:F0) 


[ort [ rsnonic [Reseternane [tut [Tope 
NMI_SC NMI Status and Control R/W, RO 
NMI_EN NMI Enable R/W (special) 


13.7.1 NMI_SC—NMI Status and Control Register 
(LPC I/ F—D31:F0) 





1/O Address: 61h Attribute: R/W, RO 
Default Value: 00h Size: 8- bit 
Lockable: No Power Well: Core 


a 


SERR# NMI Source Status (SERR#_NMI_ STS) — RO. 

1 = Bit is set if a PCI agent detected a system error and pulses the PCI SERR# line and 
if bit 2 (PCl_SERR_EN) is cleared. This interrupt source is enabled by setting bit 2 
to 0. To reset the interrupt, set bit 2 to 1 and then set it to 0. When writing to port 
61h, this bit must be 0. 

NOTE: This bit is set by any of the ICH9 internal sources of SERR; this includes SERR 

assertions forwarded from the secondary PCI bus, errors on a PCI Express* 
port, or other internal functions that generate SERR#. 


1OCHK# NMI Source Status (IOCHK_NMI_ STS) — RO. 

1 = Bit is set if an LPC agent (via SERIRQ) asserted |OCHK# and if bit 3 
(LOCHK_NMI_EN) is cleared. This interrupt source is enabled by setting bit 3 to 0. 
To reset the interrupt, set bit 3 to 1 and then set it to 0. When writing to port 61h, 
this bit must be a 0. 


Timer Counter 2 OUT Status (TMR2_OUT_STS) — RO. This bit reflects the current 
state of the 8254 counter 2 output. Counter 2 must be programmed following any PCI 
reset for this bit to have a determinate value. When writing to port 61h, this bit must 

bea 0. 


Refresh Cycle Toggle (REF_TOGGLE) — RO. This signal toggles from either 0 to 1 or 
1 to 0 at a rate that is equivalent to when refresh cycles would occur. When writing to 
port 61h, this bit must be a 0. 

1OCHK# NMI Enable (1LOCHK_NMI_ EN) — R/W. 

0 = Enabled. 

1 = Disabled and cleared. 

PCI SERR# Enable (PCI_SERR_EN) — R/W. 


0 = SERR# NMIs are enabled. 
1 = SERR# NMIs are disabled and cleared. 
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13.7.2 


Note: 


13.7.3 


ee ee 


Speaker Data Enable (SPKR_DAT_EN) — R/W. 
0 = SPKR output is a 0. 


1 = SPKR output is equivalent to the Counter 2 OUT signal value. 


Timer Counter 2 Enable (TIM_CNT2_EN) — R/W. 
0 = Disable 
1 = Enable 





NMI_EN—NMI Enable (and Real Time Clock I ndex) 
Register (LPC 1/ F—D31:FO) 


1/O Address: 70h Attribute: R/W (special) 
Default Value: 80h Size: 8-bit 
Lockable: No Power Well: Core 


The RTC Index field is write-only for normal operation. This field can only be read in Alt- 
Access Mode. Note, however, that this register is aliased to Port 74h (documented in), 
and all bits are readable at that address. 


EE —— 


NMI Enable (NMI_EN) — R/W (special). 
0 = Enable NMI sources. 
1 = Disable All NMI sources. 


Real Time Clock Index Address (RTC_INDX) — R/W (special). This data goes to 
the RTC to select which register or CMOS RAM address is being accessed. 





PORT92—Fast A20 and Init Register (LPC |/ F—D31:F0) 


1/O Address: 92h Attribute: R/W 
Default Value: 00h Size: 8- bit 
Lockable: No Power Well: Core 


a 


Alternate A20 Gate (ALT_A20_GATE) — R/W. This bit is Or'd with the AZOGATE 
input signal to generate A2Z0M# to the processor. 


0 = A20M# signal can potentially go active. 
1 = This bit is set when INIT# goes active. 


INIT_NOW — R/W. When this bit transitions from a 0 to a 1, the |CH9 will force INIT# 
active for 16 PCI clocks. 
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13.7.4 COPROC_ERR—Coprocessor Error Register 
(LPC I/ F—D31:FO) 


1/O Address: FOh Attribute: WO 
Default Value: 00h Size: 8-bits 
Lockable: No Power Well: Core 


Coprocessor Error (COPROC_ERR) — WO. Any value written to this register will 


cause IGNNE# to go active, if FERR# had generated an internal |RQ13. For FERR# to 
generate an internal |RQ13, the COPROC_ERR_EN bit (Chipset Configuration Register, 
Offset 31FFh, bit 1) must be 1. 





13.7.5 RST_CNT—Reset Control Register (LPC I / F—D31:FO) 


1/O Address: CF9h Attribute: R/W 
Default Value: 00h Size: 8- bit 
Lockable: No Power Well: Core 


Ls 


Full Reset (FULL_RST) — R/W. This bit is used to determine the states of SLP_S3#, 
SLP_S4#, and SLP_S5# after a CF9 hard reset (SYS_RST =1 and RST_CPU is set to 1), 
after PWROK going low (with RSMRST# high), or after two TCO timeouts. 

0 = 1CH9 will keep SLP_S3#, SLP_S4# and SLP_S5# high. 

1 = 1CH9 will drive SLP_S3#, SLP_S4# and SLP_S5# low for 3 - 5 seconds. 


NOTE: When this bit is set, it also causes the full power cycle (SLP_S3/4/5# assertion) 
in response to SYSRESET#, PWROK#, and Watchdog timer reset sources. 


Reset CPU (RST_CPU) — R/W. When this bit transitions from a 0 to a 1, it initiates a 


hard or soft reset, as determined by the SYS_RST bit (bit 1 of this register). 


System Reset (SYS_ RST) — R/W. This bit is used to determine a hard or soft reset to 

the processor. 

0 = When RST_CPU bit goes from 0 to 1, the ICH9 performs a soft reset by activating 
INIT# for 16 PCI clocks. 

1 = When RST_CPU bit goes from 0 to 1, the ICH9 performs a hard reset by activating 
PLTRST# and SUS_STAT# active for about 5-6 milliseconds. In this case, 
SLP_S3#, SLP_S4# and SLP_S5# state (assertion or de-assertion) depends on 
FULL_RST bit setting. The |CH9 main power well is reset when this bit is 1. It also 
resets the resume well bits (except for those noted throughout the EDS). 


| 0 | Reserved 
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13.8 


13.8.1 


Table 13-9. 


Power Management Registers (PM—D31:F0) 


The power management registers are distributed within the PCI Device 31: Function 0 
space, as well as a separate |/O range. Each register is described below. Unless 
otherwise indicate, bits are in the main (core) power well. 


Bits not explicitly defined in each register are assumed to be reserved. When writing to 
a reserved bit, the value should always be 0. Software should not attempt to use the 
value read from a reserved bit, as it may not be consistently 1 or 0. 


Power Management PCI Configuration Registers 
(PM—D31:FO) 


Table 13-9 shows a small part of the configuration space for PCI Device 31: Function 0. 
It includes only those registers dedicated for power management. Some of the 
registers are only used for Legacy Power management schemes. 


Power Management PCI Register Address Map (PM—D31:F0) 
[erset [wramonie [Reaiternime [ oaru [Tyne 
AOh GEN PMCON 1 General Power Management 0000h R/W,, R/WO, 
= ] Configuration 1 RO 
Aon. | Gencemcon > | Cetera! Power Management 00h R/W, R/WC 
= 7 Configuration 2 
Aah | GEN SPMCON. 3 | Generel Power Management 00h R/W, R/WC 
= = Configuration 3 


GEN_PMCON_LO | General Power Management 
Hen Configuration Lock oon BOP ne 
C5_EXIT_TIMING | C5 Exit Timing Register (Mobile 
Cx-STATE_CNF area Configuration (Mobile ooh R/W 


con [ IW 
Ty 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 487 


] ® 
| Nn tel LPC Interface Bridge Registers (D31:FO) 


13.8.1.1 GEN_PMCON_1—General PM Configuration 1 Register 
(PM—D31:F0) 


Offset Address: AOh Attribute: R/W, RO, R/WO 

Default Value: | 0000h Size: 16-bit 

Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


Eo rr 


C4 Disable — R/W. This bit disables the C4 feature. 
0 = Enables C4 
Gens 1 = Disables C4. 
Only) When C4 Disable is 1: 
¢ 1/O reads to the LVL4 register will be retried normally, but with no other action 
¢ All C4 transition attempts are disabled, overriding C4onC3 and Pop-Down transition. 


C5_ Enable — R/W. This bit enables the C5 and C6 features. When this bit is 0, the 
platform does not enable the C5 and C6 features. When this bit is 1, the platform 
enables C5/C6 features. 


This bit also, along with GPIO_USE_SEL[0] bit, enables selection of PMSYNC# 
function on ICH pin as shown below: 


GPIO_USE_SEL[0] C5_Enable Result 
1 X GPIO 
0 0 See Below 
0 1 PMSYNC# 


When C5_Enable and GPIO_USE_SEL[0] are both 0: 


The R/W bits of the C5 Exit Timing Register become scratchpad bits with no effect on 
hardware functions 


I/O Reads to the LVL5 and LVL6 registers will be retired normally, but with no other action 


All attempts to enter deeper C-States that require a transition through the C5 timing logic 
will be ignored 


12:11 
(Desktop | Reserved 
Only) 
BIOS_PCI_EXP_EN — R/W. This bit acts as a global enable for the SCI associated 
with the PCI Express* ports. 
10 0 = The various PCI Express ports and (G)MCH cannot cause the PCI_EXP_STS bit to 
go active. 
1 = The various PCI Express ports and (G)MCH can cause the PCI_EXP_STS bit to go 
active. 


PWRBTN_LVL — RO. This bit indicates the current state of the PWRBTN# signal. 


Reserved 


(Desktop | Reserved 
Only) 


7 
(Mobile 
Only) 


Enter C4 When C3 Invoked (C4onC3_ EN) — R/W. If this bit is set, then when 
software does a LVL3 read, the |CH9 transitions to the C4 state. 
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(Desktop 
Only) 


(Mobile 
Only) 


2 
(Mobile 
Only) 


i64_EN. Software sets this bit to indicate that the processor is an |A_64 processor, 
not an |A_32 processor. This may be used in various state machines where there are 
behavioral differences. 


CPU SLP# Enable (CPUSLP_EN) — R/W. 

0 = Disable. 

1 = Enables the CPUSLP# signal to go active in the S1 state. This reduces the 
processor power. 


NOTE: CPUSLP# will go active during Intel SpeedStep® technology transitions and 
on entry to C3 and C4 states even if this bit is not set. (Mobile Only) 


SMI_LOCK — R/WO. When this bit is set, writes to the GLB_SMI_EN bit (PMBASE + 
30h, bit 0) will have no effect. Once the SMI_LOCK bit is set, writes of 0 to 
SMI_LOCK bit will have no effect (i.e., once set, this bit can only be cleared by 
PLTRST#). 


Reserved 


Intel SpeedStep Enable (SS_EN) — R/W. 

0 = Intel SpeedStep technology logic is disabled and the SS_CNT register will not be 
visible (reads to SS_CNT will return OOh and writes will have no effect). 

1 = Intel SpeedStep technology logic is enabled. 


PCI CLKRUN# Enable (CLKRUN_EN) — R/W. 


0 = Disable. ICH9 drives the CLKRUN# signal low. 
1 = Enable CLKRUN# logic to control the system PCI clock via the CLKRUN# and 
STP_PCI# signals. 


NOTE: When the SLP_EN# bit is set, the |CH9 drives the CLKRUN# signal low 
regardless of the state of the CLKRUN_EN bit. This ensures that the PCI and 
LPC clocks continue running during a transition to a sleep state. 


Periodic SMI# Rate Select (PER_SMI_SEL) — R/W. Set by software to control 
the rate at which periodic SMI# is generated. 

00 = 64 seconds 

01 = 32 seconds 

10 = 16 seconds 

11 = 8 seconds 
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13.8.1.2 GEN_PMCON_2—General PM Configuration 2 Register 
(PM—D31:F0) 


Offset Address: A2h Attribute: R/W, R/WC 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI, Legacy 
Power Well: Resume 


rrr ee 


DRAM [Initialization Bit — R/W. This bit does not effect hardware functionality in any 
way. BIOS is expected to set this bit prior to starting the DRAM initialization sequence 
and to clear this bit after completing the DRAM initialization sequence. BIOS can detect 
that a DRAM initialization sequence was interrupted by a reset by reading this bit during 
the boot sequence. 

¢ If the bit is 1, then the DRAM initialization was interrupted. 

¢ This bit is reset by the assertion of the RSMRST# pin. 


CPU PLL Lock Time (CPLT) — R/W. This field indicates the amount of time that the 

processor needs to lock its PLLs. This is used wherever timing t270 (Chapter 8) applies. 

00 = min 30.7 us (Default) 

01 = min 61.4 us 

10 = min 122.8 us 

11 = min 245.6 us 

It is the responsibility of the BIOS to program the correct value in this field prior to the 

first transition to C3 or C4 states (or performing Intel SpeedStep® technology 

transitions). (Mobile Only) 

NOTE: The DPSLP-TO-MCH Message bits (D31:F0:AAh, bits 1:0) act as an override to 
these bits. 

NOTE: These bits are not cleared by any type of reset except RSMRST# or a CF9h 
write. 


System Reset Status (SRS) — R/WC. Software clears this bit by writing a 1 to it. 


0 = SYS_RESET# button Not pressed. 
1 = 1CH9 sets this bit when the SYS_RESET# button is pressed. BIOS is expected to 
read this bit and clear it, if it is set. 


NOTE: This bit is also reset by RSMRST# and CFQh resets. 


CPU Thermal Trip Status (CTS) — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = This bit is set when PLTRST# is inactive and THRMTRIP# goes active while the 
system is in an SO or S11 state. 


NOTES: 

1. This bit is also reset by RSMRST#, and CFQh resets. It is not reset by the 
shutdown and reboot associated with the CPUTHRMTRIP# event. 

2. The CF9h reset in the description refers to CF9h type core well reset which 
includes SYS_RST#, PWROK/VRMPWRGD low, SMBus hard reset, TCO Timeout. 
This type of reset will clear CTS bit. 
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Peat 


Minimum SLP_S4# Assertion Width Violation Status — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = Hardware sets this bit when the SLP_S4# assertion width is less than the time 
programmed in the SLP_S4# Minimum Assertion Width field (D31: FO: Offset 
A4h: bits 5:4). The |CH9 begins the timer when SLP_S4# is asserted during S4/S5 
entry, or when the RSMRST# input is deasserted during G3 exit. Note that this bit 
is functional regardless of the value in the SLP_S4# Assertion Stretch Enable 
(D31:F0: Offset A4h: bit 3). 


NOTE: This bit is reset by the assertion of the RSMRST# pin, but can be set in some 
cases before the default value is readable. 


CPU Power Failure (CPUPWR_FLR) — R/W. 


0 = Software (typically BIOS) clears this bit by writing a 0 to it. 
1 = Indicates that the VRMPWRGD signal from the processor’s VRM went low while the 
system was in an SO or S1 state. 
NOTE: VRMPWRGD is sampled using the RTC clock. Therefore, low times that are less 
than one RTC clock period may not be detected by the Intel ICH9. 


PWROK Failure (PWROK_FLR) — R/WC. 


0 = Software clears this bit by writing a 1 to it, or when the system goes into a G3 
state. 

1 = This bit will be set any time PWROK goes low, when the system was in SO, or S1 
state. The bit will be cleared only by software by writing a 1 to this bit or when the 
system goes to a G3 state. 

NOTE: See Chapter 5.13.7.3 for more details about the PWROK pin functionality. 

NOTE: In the case of true PWROK failure, PWROK will go low first before the 

VRMPWRGD. 
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13.8.1.3 GEN_PMCON_3—General PM Configuration 3 Register 
(PM—D31:F0) 


Offset Address: A4h Attribute: R/W, R/WC 

Default Value: OOh Size: 16-bit 

Lockable: No Usage: ACPI, Legacy 
Power Well: RTC, SUS 


General Reset Status (GEN_RST_STS) — R/WC. This bit is set by hardware whenever 
PLTRST# asserts for any reason other than going into a software-entered sleep state 
(via PMICNT.SLP_EN write) or a suspend well power failure (RSMRST# pin assertion). 
BIOS is expected to consult and then write a ‘1’ to clear this bit during the boot flow 
before determining what action to take based on PM1_STS.WAK_STS = 1. If 
GEN_RST_STS = ‘1’, the cold reset boot path should be followed rather than the 
resume path, regardless of the setting of WAK_STS. 


This bit is cleared by the RSMRST# pin. 


S4_STATE# Pin Disable — R/W. 


0 = The traditional SLP_S4# signal (without Management Engine Overrides) is driven 
on the S4_STATE# Pin. GPI026 defaults to its native functionality, S4_STATE#. 
1 = The S4_STATE# pin functionality is disabled. The pin is configured as GPIO26, 
default as an output. 
NOTE: This bit is cleared by RTCRST#. This bit acts as an override for 
GPIO_USE_SEL[26]. 


SWSMI_RATE_SEL — R/W. This field indicates when the SWSMI timer will time out. 
Valid values are: 
00 = 1.5 ms + 0.6 ms 
01=16ms+4ms 
10 = 32 ms + 4ms 
11 = 64 ms + 4ms 
These bits are not cleared by any type of reset except RTCRST#. 


SLP_S4# Minimum Assertion Width — R/W. This field indicates the minimum 
assertion width of the SLP_S4# signal to ensure that the DRAMs have been safely 
power-cycled. 

Valid values are: 


11 = 1 to 2 seconds 
10 = 2 to 3 seconds 

01 = 3 to 4 seconds 

00 = 4 to 5 seconds 

This value is used in two ways: 

1 If the SLP_S4# assertion width is ever shorter than this time, a status bit is set 
for BIOS to read when SO is entered. 

2 If enabled by bit 3 in this register, the hardware will prevent the SLP_S4# signal 
from deasserting within this minimum time period after asserting. 


RTCRST# forces this field to the conservative default state (O0b). 
NOTE: This field is RO when the SLP_S4# Stretching Policy Lock-Down bit is set. 


SLP_S4# Assertion Stretch Enable — R/W. 

0 = The SLP_S4# minimum assertion time is 1 to 2 RTCCLK. 

1 = The SLP_S4# signal minimally assert for the time specified in bits 5:4 of this 
register. 

This bit is cleared by RTCRST#. 

NOTE: This bit is RO when the SLP_S4# Stretching Policy Lock- Down bit is set. 
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RTC Power Status (RTC_PWR_STS) — R/W. This bit is set when RTCRST# indicates 
a weak or missing battery. The bit is not cleared by any type of reset. The bit will 
remain set until the software clears it by writing a 0 back to this bit position. 


Power Failure (PWR_FLR) — R/WC. This bit is in the RTC well, and is not cleared by 

any type of reset except RTCRST#. 

0 = Indicates that the trickle current has not failed since the last time the bit was 
cleared. Software clears this bit by writing a 1 to it. 

1 = Indicates that the trickle current (from the main battery or trickle supply) was 
removed or failed. 


NOTE: Clearing CMOS in an I|CH-based platform can be done by using a jumper on 
RTCRST# or GPI, or using SAFEMODE strap. Implementations should not 
attempt to clear CMOS by using a jumper to pull VccRTC low. 


AFTERG3_ EN — R/W. This bit determines what state to go to when power is re-applied 
after a power failure (G3 state). This bit is in the RTC well and is only cleared by writes 
of 06h or OEh to CF9h (when the CFQ9h global reset bit is clear), receiving hard reset 
command with or without power cycle from SMBus or RTCRST#. 


0 = System will return to SO state (boot) after power is re-applied. 

1 = System will return to the S5 state (except if it was in S4, in which case it will return 
to S4). In the S5 state, the only enabled wake event is the Power Button or any 
enabled wake event that was preserved through the power failure. 

NOTE: This bit is set any time a Power Button Override occurs (i.e., the power button is 

pressed for at least 4 consecutive seconds), due to the corresponding bit in the 
SMBus unconditional power down message, due to an internal thermal sensor 
catastrophic condition and the assertion of THRMTRIP#. 





NOTE: RSMRST# is sampled using the RTC clock. Therefore, low times that are less than one RTC 
clock period may not be detected by the ICH9. 
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13.8.1.4 | GEN_PMCON_LOCK- General Power Management Configuration Lock 


Register 

Offset Address: A6h Attribute: RO, R/WLO 
Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI 

Power Well: Core 


es rrr 


7 
(Desktop | Reserved 
Only) 


Unlocked C-State Transition — RO. This bit is set by hardware when a processor 
power state (C-State) transition deeper than C2 occurs and the C- 
STATE_CONFIG_LOCK bit is not set. This bit is cleared by PLTRST# and is not 
writable by software. 


SLP_S4# Stretching Policy Lock-Down — R/WLO. When set to 1, this bit locks 
down the SLP_S4# Minimum Assertion Width and SLP_S4# Assertion Stretch 
Enable bits in the GEN_PMCON_3 register, making them read-only. 


This bit becomes locked when a value of 1b is written to it. Writes of 0 to this bit 
are always ignored. This bit is cleared by platform reset. 


ACPI_BASE_LOCK — R/WLO. When set to 1, this bit locks down the ACPI Base 
Address Register (ABASE) at offset 40h. The Base Address Field becomes read- 
only. 

This bit becomes locked when a value of 1b is written to it. Writes of 0 to this bit 
are always ignored. Once locked by writing 1, the only way to clear this bit is to 
perform a platform reset. 


C-STATE_CONFIG_LOCK — R/WLO. When set to 1, this bit locks down the C- 
State configuration parameters. The following configuration bits become read-only 
when this bit is set: 

GEYSERVILLE_EN (GEN_PMCON_1, bit 3) 

1A64_EN (GEN_PMCON_1, bit 6) 

C4_DISABLE (GEN_PMCON_1, bit 12) 

CPU_PLL_LOCK_TIME (GEN_PMCON_2, bits 6:5) 

The entire C4 Timing Control Register (C4_TIMING_CNT) 

The entire C5 Exit Timing Register (C5_EXIT_TIMING_CNT) 


This bit becomes locked when a value of 1b is written to it. Writes of 0 to this bit 
are always ignored. Once locked by writing 1, the only way to clear this bit is to 
perform a platform reset. 


0 
(Desktop | Reserved 
Only) 
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13.8.1.5 C5_EXIT_TIMING_CNT- C5 Exit Timing Register (Mobile Only) 


Offset Address: A8gh Attribute: R/W 

Default Value: 13h Size: 8-bit 
Lockable: Yes Usage: ACPI, Legacy 
Power Well: Core 


This register is used to control the C5 and C6 Exit transitions. 


Reserved. 
SLow-C5 Exit Enable: When 1, this bit enables the Slow-C5/C6 Exit functionality. 


PMSYNC# to STPCLK# (t275): This field selects the amount of time that the ICH 
waits from the deassertion to PMSYNC# to the deassertion of STPCLK# during C5 
and C6 exit process. This timing is referred to as t275 in timing diagrams. 


000 = 16-17 PCI CLKs 
001 = 80-86 us 

010 = 99-105 us (Default) 
011 = 118-124 us 

100 = 18-24 us 

101 = 38-44 us 


110 = 56-62 us 
111 = 199-205 us 


DPRSTP# to STP_CPU# (t266b): This field selects the amount of time that the 
ICH waits from the deassertion of DPRSTP# to the deassertion of STP_CPU# during 
C5 and C6 exit process. This timing is referred to as t266b in timing diagrams. 
000 = 22-28 us 

001 = 34-40 us 

010 = 56-62 us 

011 = 95-102 us (Default) 

101 = 138-144 us 

110 = 72-78 us 

111 = 199-205 us 
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13.8.1.6 Cx-STATE_CNF—Cx State Configuration Register 
(PM—D31:F0) (Mobile Only, Except Bit 2) 


Offset Address: AQh Attribute: R/W 

Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


This register is used to enable new C-state related modes. 


SCRATCHPAD (SP) — R/W. 


Popdown Mode Enable (PDME) — R/W. This bit is used in conjunction with the 
PUME bit (D31:F0:AQ9h, bit 3). If PUME is 0, then this bit must also be 0. 
0 = The ICH9 will not attempt to automatically return to a previous C3 or C4 state. 
1 = When this bit is a 1 and Intel® 1CH9 observes that there are no bus master 
4 ; : 
requests, it can return to a previous C3 or C4 state. 
NOTE: This bit is separate from the PUME bit to cover cases where latency issues 


permit POPUP but not POPDOWN. 


Popup Mode Enable (PUME) — R/W. When this bit is a 0, the I|CH9 behaves like 

ICH5, in that bus master traffic is a break event, and it will return from C3/C4 to CO 

based on a break event. See Chapter 5.13.5 for additional details on this mode. 

0 = The ICH9 will treat Bus master traffic a break event, and will return from C3/C4 
to CO based on a break event. 

1 = When this bit is a 1 and ICH9 observes a bus master request, it will take the 
system from a C3 or C4 state to a C2 state and auto enable bus masters. This 
will let snoops and memory access occur. 


Report Zero for BM_STS (BM_STS_ZERO_EN) — R/W. 
0 = The ICH9 sets BM_STS (PMBASE + OOh, bit 4) if there is bus master activity 
from PCI, PCI Express* and internal bus masters. 
1 = When this bit is a 1, |CH9 will not set the BM_STS if there is bus master activity 
2 from PCI, PCI Express and internal bus masters. 
(Desktop NOTES: 
and If the BM_STS bit is already set when the BM_STS_ZERO_EN bit is set, the 
Mobile) BM_STS bit will remain set. Software will still need to clear the BM_STS bit. 
It is expected that if the PUME bit (this register, bit 3) is set, the 
BM_STS_ZERO_EN bit should also be set. Setting one without the other 
would mainly be for debug or errata workaround. 
BM_STS will be set by LPC DMA or LPC masters, even if BM_STS_ZERO_EN is 
set. 
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13.8.1.7 





C4-TIMING_CNT—C4 Timing Control Register 
(PM—D31:F0) (Mobile Only) 


Offset Address: AAh Attribute: R/W 

Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


This register is used to enable C-state related modes. 


Force Slow-C4 Exit — RW. 


When set to 1, this bit forces the slow-C4 exit functionality to occur, regardless of the 
trigger event or the setting of the Slow-C4 Exit Enable bit (Bit 6). 


Slow-C4 Exit Enable —When 1, this bit enables the Slow-C4 Exit functionality. 


DPRSLPVR to STPCPU — R/W. This field selects the amount of time that the ICH9 
waits for from the deassertion of DPRSLPVR to the deassertion of STP_CPU#. This 
provides a programmable time for the processor’s voltage to stabilize when exiting 
from a C4 state. This thus changes the value for t266a. 
39 Bits t266a,j, t266a,,, Comment 
00b 95 us 101 us Default 
01b 22 us 28 Us Value used for “Fast” VRMs 
10b Reserved 
11b Reserved 


DPSLP-TO-MCH Message— R/W. This field selects the DPSLP# deassertion to MCH 
message time (t270). Normally this value is determined by the CPU_PLL_LOCK_TIME 
field in the GEN_PMCON_2 register. When this field is non-zero, then the values in this 
register have higher priority. It is software’s responsibility to program these fields in a 
consistent manner. 


Bits t270 
00b Use value is CPU_PLL_LOCK_TIME field (default is 30 us) 
01b 20 us 


10b 15 us 
11b 10 us 
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13.8.1.8 BM_BREAK_EN Register (PM—D31:F0) (Mobile Only) 


Offset Address: ABh Attribute: R/W 

Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI, Legacy 
Power Well: Core 


a 


STORAGE_BREAK_EN — R/W. 


0 = Serial ATA traffic will not act as a break event. 

1 = Serial ATA traffic acts as a break event, even if the BM_STS-ZERO_EN and 
POPUP_EN bits are set. Parallel IDE or Serial ATA master activity will cause BM_STS 
to be set and will cause a break from C3/C4. 


PCIE_BREAK_EN — R/W. 

0 = PCI Express* traffic will not act as a break event. 

1 = PCI Express traffic acts as a break event, even if the BM_STS-ZERO_EN and 
POPUP_EN bits are set. PCI Express master activity will cause BM_STS to be set 
and will cause a break from C3/C4. 


PCI_BREAK_EN — R/W. 


0 = PCI traffic will not act as a break event. 

1 = PCI traffic acts as a break event, even if the BM_STS-ZERO_EN and POPUP_EN bits 
are set. PCI master activity will cause BM_STS to be set and will cause a break 
from C3/C4. 


0 = EHCI traffic will not act as a break event. 

1 = EHCI traffic acts as a break event, even if the BM_STS-ZERO_EN and POPUP_EN 
bits are set. EHCI master activity will cause BM_STS to be set and will cause a 
break from C3/C4. 


UHCI_ BREAK_EN — R/W. 

0 = UHCI traffic will not act as a break event. 

1 = USB traffic from any of the internal UHCIs acts as a break event, even if the 
BM_STS-ZERO_EN and POPUP_EN bits are set. UHCI master activity will cause 
BM_STS to be set and will cause a break from C3/C4. 


HDA_BREAK_EN — R/W. 


0 = Intel® High Definition Audio traffic will not act as a break event. 

1 = Intel High Definition Audio traffic acts as a break event, even if the BM_STS- 
ZERO_EN and POPUP_EN bits are set. 
Intel High Definition Audio master activity will cause BM_STS to be set and will 
cause a break from C3/C4. 
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13.8.1.9 PMI R—Power Management Initialization Register (PM—D31:F0) 


Offset Address: ACh Attribute: R/W 
Default Value: 00000000h Size: 32-bit 


a 
CF9h Lock Down (CF9Lock)— RW. 
3 When set to 1, this bit locks itself and bit 20 (CF9GR) in this register. 

This bit is reset by a CF9h reset. 


1 
0 PMIR Field 2 — R/W. BIOS must program this bit to 1b. 


29:21 | Reserved. 


partitions. If this bit is cleared, a CF9h write of 6h or Eh will only reset the host 
partition. This bit field is not reset by a CF9h reset. 


19:10 | Reserved 
| 9:8 | PMIR Field 0 — R/W. BIOS must program these bits to 11b. 


13.8.1.10 GPIO_ROUT—GPIO Routing Control Register 
(PM—D31:F0) 


CF9h Global Reset (CF9GR)— R/W. 
20 When set, a CF9h write of 6h or Eh will cause a Global reset of both the Host and ME 





Offset Address: B8h - BBh Attribute: R/W 
Default Value: 00000000h Size: 32-bit 
Lockable: No Power Well: Resume 


a re 
31:30 | GPIO15 Route — R/W. See bits 1:0 for description. 


Same pattern for GPIO14 through GPIO3 


GPIO2 Route — R/W. See bits 1:0 for description. 
GPIO1 Route — R/W. See bits 1:0 for description. 


cause a Wake event, even if the GPIO is NOT routed to cause an SMI# or SCI. 
00 = No effect. 

01 = SMI# (if corresponding ALT_GPI_SMI_EN bit is also set) 

10 = SCI (if corresponding GPEO_EN bit is also set) 

11 = Reserved 





GPIOO Route — R/W. GPIO[15:0] can be routed to cause an SMI or SCI when the 

GPIO[n]_STS bit is set. If the GPIOO is not set to an input, this field has no effect. 

If the system is in an S1-S5 state and if the GPEO_EN bit is also set, then the GPIO can 
1:0 


Note: GPIOs that are not implemented will not have the corresponding bits implemented in 
this register. 
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13.8.2 APM I/O Decode 


Table 13-10 shows the I/O registers associated with APM support. This register space is 
enabled in the PCI Device 31: Function 0 space (APMDEC_EN), and cannot be moved 
(fixed I/O location). 


Table 13-10. APM Register Map 


APM_CNT_ | Advanced Power Management Control Port 
APM_STS_ | Advanced Power Management Status Port 


13.8.2.1 APM_CNT—Advanced Power Management Control Port Register 





1/O Address: B2h Attribute: R/W 

Default Value: 00h Size: 8-bit 
Lockable: No Usage: Legacy Only 
Power Well: Core 


a 


Used to pass an APM command between the OS and the SMI handler. Writes to this 
port not only store data in the APMC register, but also generates an SMI# when the 
APMC_EN bit is set. 





13.8.2.2 APM_STS—Advanced Power Management Status Port Register 


1/O Address: B3h Attribute: R/W 

Default Value: OOh Size: 8-bit 
Lockable: No Usage: Legacy Only 
Power Well: Core 


Bit | Description 


7: Used to pass data between the OS and the SMI handler. Basically, this is a scratchpad 
register and is not affected by any other register or function (other than a PCI reset). 
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13.8.3 Power Management I|/ O Registers 


Table 13-11 shows the registers associated with ACPI and Legacy power management 
support. These registers are enabled in the PCI Device 31: Function 0 space 
(PM_IO_EN), and can be moved to any I/O location (128-byte aligned). The registers 
are defined to support the ACPI 3.0a specification, and use the same bit names. 


Note: All reserved bits and registers will always return 0 when read, and will have no effect 
when written. 


Table 13-11. ACPI and Legacy I/ O Register Map (Sheet 1 of 2) 


PMBASE : 
cdr | Mnemonic | Register Name | ACPI Pointer | erate Type 


00h- 01h PM1_STS PM1 Status PMla_EVT_BLK 0000h R/WC 


02h-03h PM1_EN PM1 Enable me gee | O00 R/W 


04h- 07h PM1_CNT PM1 Control PMla_CNT_BLK | 00000000h R/W, WO 
O8h- OBh PM1_TMR PM1 Timer PMTMR_BLK xx000000h 


10h-13h | PROC_CNT __ | Processor Control P_BLK ooo00000h | PR’, RO, 


fReseved(oaneom) | — |__| 
wa 
Lv4 Level 4 (Mobile Only 


18h | V6 Level 6 (Mobile Only) 
eS 


faeevea [= | = 
GPEO_STS Sele e en GPEO_BLK | 00000000h | R/WC 
Status = 
GPEO_EN Genetal Purpose event @ GPEO_BLK+8 | 00000000h R/W 
Enables 7 
30h- 33h SMI_EN SMI# Control and Enable i 00000000h ee 
34h-37h SMI_STS SMI Status 00000000h | R/WC, RO 


38h-39h | ALT_GP_SMI_EN | Alternate GP! SMI Enable 0000h R/W 
3Ah-3Bh | ALT_GP_SMI_STS | Alternate GPI SMI Status 0000h R/WC 


USB Per-Port Registers R/WC, RO, 


19h-1Fh 


20-27h 


e) 


28-2Fh 


Eno 
= 
=o 
a 
=o 
(eal 
End 
EE 
[Sah 38h 


Arh GPE CNTL General Purpose Event 00h RO, R/W 
= Control 


44h-45h | DEVACT_STS | Device Activity Status Po 0000h R/WC 
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Table 13-11. ACPI and Legacy I/ O Register Map (Sheet 2 of 2) 


Register Name ACPI Pointer 


i oS Reserved (Desktop Only) 
ee ) 


eee | 
+ Offset 
ee ee 
a 


C3-Residency Register 
C5-Residency Register 


60h-7Fh oS Reserved for TCO 
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13.8.3.1 PM1_STS—Power Management 1 Status Register 
1/O Address: PMBASE + 00h 


(ACPI PMla_EVT_BLK) Attribute: R/WC 
Default Value: | 0000h Size: 16-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Bits 0-7: Core, 


Bits 8-15: Resume, 
except Bit 11 in RTC 


If bit 10 or 8 in this register is set, and the corresponding _ EN bit is set in the PM1_EN 
register, then the |CH9 will generate a Wake Event. Once back in an SO state (or if 
already in an SO state when the event occurs), the ICH9 will also generate an SCI if the 
SCI_EN bit is set, or an SMI# if the SCI_EN bit is not set. 


Note: Bit 5 does not cause an SMI# or a wake event. Bit 0 does not cause a wake event but 
can cause an SMI# or SCI. 


a 


Wake Status (WAK_STS) — R/WC. This bit is not affected by hard resets caused 

by a CF9 write, but is reset by RSMRST#. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by hardware when the system is in one of the sleep states (via the SLP_EN 
bit) and an enabled wake event occurs. Upon setting this bit, the 1CH9 will 
transition the system to the ON state. 

If the AFTERG3_EN bit is not set and a power failure (such as removed batteries) 

occurs without the SLP_EN bit set, the system will return to an SO state when power 

returns, and the WAK_STS bit will not be set. 


If the AFTERG3_EN bit is set and a power failure occurs without the SLP_EN bit 
having been set, the system will go into an S5 state when power returns, and a 
subsequent wake event will cause the WAK_STS bit to be set. Note that any 
subsequent wake event would have to be caused by either a Power Button press, or 
an enabled wake event that was preserved through the power failure (enable bit in 
the RTC well). 


PCI Express Wake Status (PCIEXPWAK_STS) — R/WC. 


0 = Software clears this bit by writing a 1 to it. If the WAKE# pin is still active during 
the write or the PME message received indication has not been cleared in the 
root port, then the bit will remain active (i.e. all inputs to this bit are level- 
sensitive). 

1 = This bit is set by hardware to indicate that the system woke due to a PCI 
Express wakeup event. This wakeup event can be caused by the PCI Express 
WAKE# pin being active or receipt of a PCI Express PME message at a root port. 
This bit is set only when one of these events causes the system to transition 
from a non-SO system power state to the SO system power state. This bit is set 
independent of the state of the PCIEXP_WAKE_DIS bit. 

Note: This bit does not itself cause a wake event or prevent entry to a sleeping 

state. Thus if the bit is 1 and the system is put into a sleeping state, the system will 

not automatically wake. 
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Power Button Override Status (PWRBTNOR_STS) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 

1 = This bit is set any time a Power Button Override occurs (i.e., the power button is 
pressed for at least 4 consecutive seconds), due to the corresponding bit in the 
SMBus slave message, ME Initiated Power Button Override, ME Initiated Host 
Reset with Power down or due to an internal thermal sensor catastrophic 
condition. The power button override causes an unconditional transition to the 
S5 state, as well as sets the AFTERG3_EN bit. The BIOS or SCI handler clears 
this bit by writing a 1 to it. This bit is not affected by hard resets via CF9h 
writes, and is not reset by RSMRST#. Thus, this bit is preserved through power 
failures. Note that if this bit is still asserted when the global SCI_EN is set then 
an SCI will be generated. 


RTC Status (RTC_STS) — R/WC. This bit is not affected by hard resets caused by a 

CF9 write, but is reset by RSMRST#. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by hardware when the RTC generates an alarm (assertion of the |RQ8# 
signal). Additionally if the RTC_EN bit (PMBASE + 02h, bit 10) is set, the setting 
of the RTC_STS bit will generate a wake event. 


ME_ STS — R/WC. This bit is set when the Management Engine generates a Non- 
Maskable wake event, and is not affected by any other enable bit. When this bit is 
set, the Host Power Management logic wakes to SO. 

This bit is only set by hardware and can only be reset by writing a one to this bit 
position. This bit is not affected by hard resets caused by a CF9 write, but is reset by 
RSMRST#. 


Power Button Status (PWRBTN__ STS) — R/WC. This bit is not affected by hard 

resets caused by a CF9 write. 

0 = If the PWRBTN# signal is held low for more than 4 seconds, the hardware clears 
the PWRBTN_STS bit, sets the PWRBTNOR_STS bit, and the system transitions 
to the S5 state with only PWRBTN# enabled as a wake event. 


This bit can be cleared by software by writing a one to the bit position. 
1 = This bit is set by hardware when the PWRBTN# signal is asserted Low, 
independent of any other enable bit. 


In the SO state, while PWRBTN_EN and PWRBTN_STS are both set, an SCI (or 
SMI# if SCI_EN is not set) will be generated. 


In any sleeping state S1-S5, while PWRBTN_EN (PMBASE + 02h, bit 8) and 
PWRBTN_STS are both set, a wake event is generated. 
NOTE: If the PWRBTN_STS bit is cleared by software while the PWRBTN# signal is 
sell asserted, this will not cause the PWRBN_STS bit to be set. The PWRBTN# 
signal must go inactive and active again to set the PWRBTN_STS bit. 


0 = The SCI handler should then clear this bit by writing a 1 to the bit location. 

1 = Set when an SCI is generated due to BIOS wanting the attention of the SCI 
handler. BIOS has a corresponding bit, BLOS_RLS, which will cause an SCI and 
set this bit. 
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Bus Master Status (BM_STS) — R/WC. This bit will not cause a wake event, SCI 

or SMI#. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by the ICH9 when a bus master requests access to main memory. Bus 
master activity is detected by any of the PCI Requests being active, any internal 
bus master request being active, or REQ-C2 message received while in C3 or C4 
state. 

NOTES: 

d, If the BM_STS_ZERO_EN bit is set, then this bit will generally report as a 0. 


LPC DMA and bus master activity will always set the BM_STS bit, even if the 
BM_STS_ZERO_EN bit is set. 


Timer Overflow Status (TMROF_STS) — R/WC. 


0 = The SCI or SMI# handler clears this bit by writing a 1 to the bit location. 

1 = This bit gets set any time bit 22 of the 24-bit timer goes high (bits are 
numbered from 0 to 23). This will occur every 2.3435 seconds. When the 
TMROF_EN bit (PMBASE + 02h, bit 0) is set, then the setting of the TMROF_STS 
bit will additionally generate an SCI or SMI# (depending on the SCI_ EN). 
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13.8.3.2 PM1_EN—Power Management 1 Enable Register 
1/O Address: PMBASE + 02h 


(ACPI PMla_EVT_BLK + 2) Attribute: R/W 
Default Value: | 0000h Size: 16-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Bits 0-7: Core, 

Bits 8-9, 11-15: Resume, 

Bit 10: RTC 


Pe asso 


PCI Express* Wake Disable( PCI EXPWAK_DIS) — R/W. Modification of this bit has 

no impact on the value of the PCIEXP_WAKE_STS bit. 

0 = Inputs to the PCIEXP_WAKE_STS bit in the PM1 Status register enabled to wake 
the system. 

1 = Inputs to the PCIEXP_WAKE_STS bit in the PM1 Status register disabled from 
waking the system. 


14 


RTC Event Enable (RTC_EN) — R/W. This bit is in the RTC well to allow an RTC event 

to wake after a power failure. This bit is not cleared by any reset other than RTCRST# 

or a Power Button Override event. 

0 = No SCI (or SMI#) or wake event is generated then RTC_STS (PMBASE + OOh, bit 
10) goes active. 

1 = An SCI (or SMI#) or wake event will occur when this bit is set and the RTC_STS bit 
goes active. 


eRe 


Power Button Enable (PWRBTN_EN) — R/W. This bit is used to enable the setting 
of the PWRBTN_STS bit to generate a power management event (SMI#, SCI). 


PWRBTN_EN has no effect on the PWRBTN_STS bit (PMBASE + 00h, bit 8) being set by 
the assertion of the power button. The Power Button is always enabled as a Wake 
event. 


0 = Disable. 
1 = Enable. 


Global Enable (GBL_EN) — R/W. When both the GBL_EN and the GBL_STS bit 
(PMBASE + 00h, bit 5) are set, an SCI is raised. 


0 = Disable. 
1 = Enable SCI on GBL_STS going active. 


Timer Overflow Interrupt Enable (TMROF_EN) — R/W. Works in conjunction with 
the SCI_EN bit (PMBASE + 04h, bit 0) as described below: 


TMROF_EN SCI_EN Effect when TMROF_STS is set 
No SMI# or SCI 
SMI# 
SCl 
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13.8.3.3 PM1_CNT—Power Management 1 Control 
1/O Address: PMBASE + 04h 


(ACPI PMla_CNT_BLK) Attribute: R/W, WO 
Default Value: © Q0000000h Size: 32-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Bits 0-7: Core, 

Bits 8-12: RTC, 


Bits 13-15: Resume 


oe 
31:14 Reserved. 


13 Sleep Enable (SLP_EN) — WO. Setting this bit causes the system to sequence into 
the Sleep state defined by the SLP_TYP field. 


Sleep Type (SLP_ TYP) — R/W. This 3-bit field defines the type of Sleep the 
system should enter when the SLP_EN bit is set to 1. These bits are only reset by 
RTCRST#. 


Code Master I nterrupt 
000b ON: Typically maps to SO state. 


Asserts STPCLK#. Puts processor in Stop-Grant state. Optional to 
001b assert CPUSLP# to put processor in sleep state: Typically maps to S1 
state. 


010b Reserved 
011b Reserved 
100b Reserved 
101b Suspend-To-RAM. Assert SLP_S3#: Typically maps to S3 state. 


Suspend-To-Disk. Assert SLP_S3#, and SLP_S4#: Typically maps to 
S4 state. 


Soft Off. Assert SLP_S3#, SLP_S4#, and SLP_S5#: Typically maps to 
S5 state. 


110b 


111b 


Global Release (GBL_RLS) — WO. 
0 = This bit always reads as 0. 
2 1 = ACPI software writes a 1 to this bit to raise an event to the BIOS. BIOS software 
has a corresponding enable and status bits to control its ability to receive ACPI 


events. 


(Desktop | Reserved 
Only) 


Bus Master Reload (BM_RLD) — R/W. This bit is treated as a scratchpad bit. This 
bit is reset to 0 by PLTRST# 
1 0 = Bus master requests will not cause a break from the C3 state. 
(Mobile | 1 = Enables Bus Master requests (internal or external) to cause a break from the C3 
Only) state. 


If software fails to set this bit before going to C3 state, ICH9 will still return to a 
snoopable state from C3 or C4 states due to bus master activity. 
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SCI Enable (SCI_EN) — R/W. Selects the SCI interrupt or the SMI# interrupt for 
various events including the bits in the PM1_STS register (bit 10, 8, 0), and bits in 


GPEO_STS. 


0 = These events will generate an SMI#. 
1 = These events will generate an SCI. 





13.8.3.4 PM1_TMR—Power Management 1 Timer Register 


1/O Address: PMBASE + 08h 
(ACPI PMTMR_BLK) 


Attribute: RO 
Default Value: |= xx000000h Size: 32-bit 
Lockable: No Usage: ACPI 


Power Well: Core 


Description 


31:24 | Reserved 


Timer Value (TMR_VAL) — RO. Returns the running count of the PM timer. This 

counter runs off a 3.579545 MHz clock (14.31818 MHz divided by 4). It is reset to 0 

during a PCI reset, and then continues counting as long as the system is in the SO 

state. After an S1 state, the counter will not be reset (it will continue counting from the 
23:0 


last value in SO state. 


Anytime bit 22 of the timer goes HIGH to LOW (bits referenced from 0 to 23), the 
TMROF_STS bit (PMBASE + OOh, bit 0) is set. The High-to-Low transition will occur 
every 2.3435 seconds. If the TMROF_EN bit (PMBASE + 02h, bit 0) is set, an SCI 
interrupt is also generated. 





13.8.3.5 PROC_CNT—Processor Control Register 
1/O Address: PMBASE + 10h 


(ACPI P_BLK) Attribute: R/W, RO, WO 
Default Value: | 00000000h Size: 32-bit 
Lockable: No (bits 7:5 are write once) Usage: ACPI or Legacy 
Power Well: Core 


ee aaa 


Throttle Status (THTL_STS) — RO. 

0 = No clock throttling is occurring (maximum processor performance). 

1 = Indicates that the clock state machine is throttling the processor performance. This 
could be due to the THT_EN bit or the FORCE_THTL bit being set. 


ee 


Force Thermal Throttling (FORCE_THTL) — R/W. Software can set this bit to force 

the thermal throttling function. 

0 = No forced throttling. 

1 = Throttling at the duty cycle specified in THRM_DTY starts immediately, and no 
SMI# is generated. 
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THRM_DTY — WO. This write-once field determines the duty cycle of the throttling 
when the FORCE_THTL bit is set. The duty cycle indicates the approximate percentage 
of time the STPCLK# signal is asserted while in the throttle mode. The STPCLK# 
throttle period is 1024 PCICLKs. Note that the throttling only occurs if the system is in 
the CO state. If in the C2, C3, or C4 state, no throttling occurs. 


Once the THRM_DTY field is written, any subsequent writes will have no effect until 
PLTRST# goes active. 


THRM_DTY Throttle Mode PCI Clocks 
000b 50% (Default) 512 
001b 87.5% 896 
010b 75.0% 768 
011b 62.5% 640 
100b 50% 512 
101b 37.5% 384 
110b 25% 256 
111b 12.5% 128 


THTL_EN — R/W. When set and the system is in a CO state, it enables a processor- 
controlled STPCLK# throttling. The duty cycle is selected in the THTL_DTY field. 

0 = Disable 

1 = Enable 


THTL_DTY — R/W. This field determines the duty cycle of the throttling when the 
THTL_EN bit is set. The duty cycle indicates the approximate percentage of time the 
STPCLK# signal is asserted (low) while in the throttle mode. The STPCLK# throttle 
period is 1024 PCICLKs. 


THTL_DTY Throttle Mode PCI Clocks 
000b 50% (Default) 512 
001b 87.5% 896 
010b 75.0% 768 
011b 62.5% 640 
100b 50% 512 
101b 37.5% 384 
110b 25% 256 
111b 12.5% 128 


| 0 | Reserved 
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LV2 — Level 2 Register 
1/O Address: PMBASE + 14h 


(ACPI P_BLK+4) Attribute: RO 
Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


7 rr ree 


Reads to this register return all Os, writes to this register have no effect. Reads to this 


register generate a “enter a level 2 power state” (C2) to the clock control logic. This will 
cause the STPCLK# signal to go active, and stay active until a break event occurs. 
Throttling (due either to THTL_EN or FORCE_THTL) will be ignored. 





13.8.3.7 


NOTE: This register should not be used by IA-64 processors or systems with more than 1 logical 
processor, unless appropriate semaphoring software has been put in place to ensure that 
all threads/processors are ready for the C2 state when the read to this register occurs. 


LV3—Level 3 Register (Mobile Only) 
1/O Address: PMBASE + 15h (ACPI P_BLK + 5) 


Attribute: RO 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


a 


Reads to this register return all Os, writes to this register have no effect. Reads to this 


register generate a “enter a C3 power state” to the clock control logic. The C3 state 
persists until a break event occurs. 





13.8.3.8 


NOTE: If the C4onC3_EN bit is set, reads this register will initiate a LVL4 transition rather than a 
LVL3 transition. In the event that software attempts to simultaneously read the LVL2 and 
LVL3 registers (which is invalid), the |CH9 will ignore the LVL3 read, and only perform a C2 
transition. 

NOTE: This register should not be used by IA-64 processors or systems with more than 1 logical 
processor, unless appropriate semaphoring software has been put in place to ensure that 
all threads/processors are ready for the C3 state when the read to this register occurs. 


LV4—Level 4 Register (Mobile Only) 
1/O Address: PMBASE + 16h (ACPI P_BLK + 6) 


Attribute: RO 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


a 


Reads to this register return all Os, writes to this register have no effect. Reads to this 


register generate a “enter a C4 power state” to the clock control logic. The C4 state 
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persists until a break event occurs. 


NOTE: This register should not be used by IA-64 processors or systems with more than 1 logical 
processor, unless appropriate semaphoring software has been put in place to ensure that 
all threads/processors are ready for the C4 state when the read to this register occurs. 
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13.8.3.9 LV5—Level 5 Register (Mobile Only) 
1/O Address: PMBASE + 17h (ACPI P_BLK + 7) 


Attribute: RO 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


Fs rrr er 


Reads to this register return all Os, writes to this register have no effect. Reads to this 


register generate a “enter a C5 power state” to the clock control logic. The C5 state 
persists until a break event occurs. 





NOTE: This register should not be used by IA-64 processors or systems with more than 1 logical 
processor, unless appropriate semaphoring software has been put in place to ensure that 
all threads/ processors are ready for the C5 state when the read to this register occurs. 


13.8.3.10 LV6—Level 6 Register (Mobile Only) 
1/O Address: PMBASE + 18h (ACPI P_BLK + 8) 


Attribute: RO 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


a 


Reads to this register return all Os, writes to this register have no effect. Reads to this 


register generate a “enter a C6 power state” to the clock control logic. The C6 state 
persists until a break event occurs. 





NOTE: This register should not be used by IA-64 processors or systems with more than 1 logical 
processor, unless appropriate semaphoring software has been put in place to ensure that 
all threads/ processors are ready for the C6 state when the read to this register occurs. 
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13.8.3.11 GPEQO_STS—General Purpose Event 0 Status Register 
1/O Address: PMBASE + 20h 


(ACPI GPEO_ BLK) Attribute: Bits 0:32 R/WC 
Bits 33:63 RO 
Default Value: | 0000000000000000h Size: 64-bit 
Lockable: No Usage: ACPI 
Power Well: Resume 


This register is symmetrical to the General Purpose Event 0 Enable Register. Unless 
indicated otherwise below, if the corresponding _EN bit is set, then when the _ STS bit 
get set, the |CH9 will generate a Wake Event. Once back in an SO state (or if already in 
an SO state when the event occurs), the |CH9 will also generate an SCI if the SCI_EN 
bit is set, or an SMI# if the SCI_EN bit (PMBASE + 04h, bit 0) is not set. Bits 31:16 are 
reset by a CF9h write; bits 63:32 and 15:0 are not. All are reset by RSMRST#. 


oe ee 


USB6_ STS — R/WC. 

0 = Disable. 

1 = Set by hardware and can be reset by writing a one to this bit position or a 
resume well reset. This bit is set when USB UHCI controller #6 needs to cause a 
wake. Additionally if the USB6_EN bit is set, the setting of the USB6_STS bit will 
generate a wake event. 


GPIOn_STS — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = These bits are set any time the corresponding GPIO is set up as an input and the 
corresponding GPIO signal is high (or low if the corresponding GP_INV bit is set). 


If the corresponding enable bit is set in the GPEO_EN register, then when the 
GPIO[n]_STS bit is set: 
If the system is in an S1-S5 state, the event will also wake the system. 


¢ If the system is in an SO state (or upon waking back to an SO state), a SCI will be caused 
depending on the GPIO_ROUT bits (D31:F0:B8h, bits 31:30) for the corresponding GPI. 
NOTE: Mapping is as follows: bit 31 corresponds to GPIO[15]... and bit 16 
corresponds to GPIO[0]. 


USB4_ STS — R/WC. 
0 = Disable. 
14 1 = Set by hardware and can be reset by writing a one to this bit position or a 
resume well reset. This bit is set when USB UHCI controller #4 needs to cause a 
wake. Additionally if the USB4_EN bit is set, the setting of the USB4_STS bit will 


generate a wake event. 
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PME_BO_STS — R/WC. This bit will be set to 1 by the |CH9 when any internal device 
with PCI Power Management capabilities on bus 0 asserts the equivalent of the PME# 
signal. Additionally, if the PME_BO_EN bit is set, and the system is in an SO state, 
then the setting of the PME_BO_STS bit will generate an SCI (or SMI# if SCI_EN is 
not set). If the PME_BO_STS bit is set, and the system is in an S1-S4 state (or S5 
state due to SLP_TYP and SLP_EN), then the setting of the PME_BO_STS bit will 
generate a wake event, and an SCI (or SMI# if SCI_EN is not set) will be generated. 
If the system is in an S5 state due to power button override, then the PME_BO_STS 
bit will not cause a wake event or SCI. 


The default for this bit is 0. Writing a 1 to this bit position clears this bit. 
Note: HD audio wake events are reported in this bit. 
Management Engine “maskable” wake events are also reported in this bit. 


USB3_ STS — R/WC. 

0 = Disable. 

1 = Set by hardware and can be reset by writing a one to this bit position or a 
resume well reset. This bit is set when USB UHCI controller #3 needs to cause a 
wake. Additionally if the USB3_EN bit is set, the setting of the USB3_STS bit will 
generate a wake event. 


PME_ STS — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by hardware when the PME# signal goes active. Additionally, if the PME_EN 
bit is set, and the system is in an SO state, then the setting of the PME_STS bit 
will generate an SCI or SMI# (if SCI_EN is not set). If the PME_EN bit is set, and 
the system is in an S1-S4 state (or S5 state due to setting SLP_TYP and 
SLP_EN), then the setting of the PME_STS bit will generate a wake event, and an 
SCI will be generated. If the system is in an S5 state due to power button 
override or a power failure, then PME_STS will not cause a wake event or SCI. 


10 
(Desktop | Reserved 
Only) 


BATLOW_STS — R/WC. (Mobile Only) Software clears this bit by writing a 1 to it. 


0 = BATLOW# Not asserted 
1 = Set by hardware when the BATLOW# signal is asserted. 


PCI_EXP_STS — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by hardware to indicate that: 
¢ The PME event message was received on one or more of the PCI Express* ports 
« An Assert PMEGPE message received from the (G)MCH via DMI 


NOTES: 

1. The PCI WAKE# pin has no impact on this bit. 

2. If the PCI_EXP_STS bit went active due to an Assert PMEGPE message, then a 
Deassert PMEGPE message must be received prior to the software write in 
order for the bit to be cleared. 

If the bit is not cleared and the corresponding PCI_EXP_EN bit is set, the 
level-triggered SCI will remain active. 

A race condition exists where the PCI Express device sends another PME 
message because the PCI Express device was not serviced within the time 
when it must resend the message. This may result in a spurious interrupt, 
and this is comprehended and approved by the PCI Express* Specification, 
Revision 1.0a. The window for this race condition is approximately 95-105 
milliseconds. 
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RI_ STS — R/WC. 
0 = Software clears this bit by writing a 1 to it. 
1 = Set by hardware when the RI# input signal goes active. 


SMBus Wake Status (SMB_WAK_STS) — R/WC. The SMBus controller can 

independently cause an SMI# or SCI, so this bit does not need to do so (unlike the 

other bits in this register). Software clears this bit by writing a 1 to it. 

0 = Wake event Not caused by the ICH9’s SMBus logic. 

1 = Set by hardware to indicate that the wake event was caused by the ICH9’s 
SMBus logic. This bit will be set by the WAKE/SMI# command type, even if the 
system is already awake. The SMI handler should then clear this bit. 


This bit is set by the SMBus slave command O1h (Wake/SMI#) even when the 
system is in the SO state. Therefore, to avoid an instant wake on subsequent 
transitions to sleep states, software must clear this bit after each reception of 
the Wake/SMI# command or just prior to entering the sleep state. 

If SMB_WAK_STS is set due to SMBus slave receiving a message, it will be 
cleared by internal logic when a THRMTRIP# event happens or a Power 
Button Override event. However, THRMTRIP# or Power Button Override event 
will not clear SMB_WAK_STS if it is set due to SMBALERT# signal going 
active. 

The SMBALERT_STS bit (D31:F3:1/O Offset 00h: Bit 5) should be cleared by 
software before the SMB_WAK_STS bit is cleared. 


TCOSCI_ STS — R/WC. Software clears this bit by writing a 1 to it. 

0 = TOC logic or thermal sensor logic did Not cause SCI. 

1 = Set by hardware when the TCO logic or thermal sensor logic causes an SCI. 

USB5_ STS— R/WC. Software clears this bit by writing a 1 to it. 

0 = USB UHCI controller 5 does NOT need to cause a wake. 

1 = Set by hardware when USB UHCI controller 5 needs to cause a wake. Wake event 

will be generated if the corresponding USB2_EN bit is set. 

USB2_ STS — R/WC. Software clears this bit by writing a 1 to it. 

0 = USB UHCI controller 2 does Not need to cause a wake. 

1 = Set by hardware when USB UHCI controller 2 needs to cause a wake. Wake event 
will be generated if the corresponding USB2_EN bit is set. 

USB1_ STS — R/WC. Software clears this bit by writing a 1 to it. 

0 = USB UHCI controller 1 does Not need to cause a wake. 

1 = Set by hardware when USB UHCI controller 1 needs to cause a wake. Wake event 
will be generated if the corresponding USB1_EN bit is set. 

SWGPE_ STS — R/WC. 

The SWGPE_CTRL bit (bit 1 of GPE_CTRL reg) acts as a level input to this bit. 


HOT_PLUG_STS — R/WC. 


0 = This bit is cleared by writing a 1 to this bit position. 
1 = When a PCI Express* Hot-Plug event occurs. This will cause an SCI if the 
HOT_PLUG_EN bit is set in the GEPO_EN register. 


Thermal I nterrupt Status (THRM_ STS) — R/WC. Software clears this bit by 
writing a 1 to it. 


0 = THRM# signal Not driven active as defined by the THRM_POL bit 

1 = Set by hardware anytime the THRM# signal is driven active as defined by the 
THRM_POL bit. Additionally, if the THRM_EN bit is set, then the setting of the 
THRM_STS bit will also generate a power management event (SCI or SMI#). 
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13.8.3.12 GPEOQ_EN—General Purpose Event 0 Enables Register 
1/O Address: PMBASE + 28h 


(ACPI GPEO_BLK + 8) Attribute: Bits 0:32 R/W 
Bits 33:63 RO 
Default Value: | 0000000000000000h Size: 64-bit 
Lockable: No Usage: ACPI 
Power Well: Bits 0-7, 9, 12, 14-63 Resume, 


Bits 8, 10-11, 13 RTC 


This register is symmetrical to the General Purpose Event 0 Status Register. All the bits 
in this register should be cleared to 0 based on a Power Button Override or processor 
Thermal Trip event. The resume well bits are all cleared by RSMRST#. The RTC well bits 
are cleared by RTCRST#. 


a 


USB6_EN — R/W. 

0 = Disable. 

1 = Enable the setting of the USB4_STS bit to generate a wake event. The 
USB6_STS bit is set anytime USB UHCI controller #6 signals a wake event. 
Break events are handled via the USB interrupt. 


GPIn_EN — R/W. These bits enable the corresponding GPI[n]_ STS bits being set to 

cause a SCI, and/or wake event. These bits are cleared by RSMRST#. 

NOTE: Mapping is as follows: bit 31 corresponds to GPIO15... and bit 16 
corresponds to GPIOO. 


USB4_EN — R/W. 
0 = Disable. 
14 1 = Enable the setting of the USB4_STS bit to generate a wake event. The 
USB4_STS bit is set anytime USB UHCI controller #4 signals a wake event. 
Break events are handled via the USB interrupt. 


PME_BO_EN — R/W. 

0 = Disable 

1 = Enables the setting of the PME_BO_STS bit to generate a wake event and/or an 
SCI or SMI #. PME_BO_STS can be a wake event from the $1-S4 states, or from 
S5 (if entered via SLP_TYP and SLP_EN) or power failure, but not Power Button 
Override. This bit defaults to 0. 


NOTE: It is only cleared by Software or RTCRST#. It is not cleared by CF9h writes. 


USB3_EN — R/W. 
0 = Disable. 
12 1 = Enable the setting of the USB3_STS bit to generate a wake event. The 
USB3_STS bit is set anytime USB UHCI controller #3 signals a wake event. 
Break events are handled via the USB interrupt. 


PME_EN — R/W. 

0 = Disable. 

1 = Enables the setting of the PME_STS to generate a wake event and/or an SCI. 
PME# can be a wake event from the S1 - S4 state or from S5 (if entered via 
SLP_EN, but not power button override). 


(Desktop | Reserved 
Only) 
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BATLOW_EN — R/W. (Mobile Only) 

0 = Disable. 

1 = Enables the BATLOW# signal to cause an SMI# or SCI (depending on the 
SCI_EN bit) when it goes low. This bit does not prevent the BATLOW# signal 
from inhibiting the wake event. 


PCI_EXP_EN — R/W. 

0 = Disable SCI generation upon PCI_EXP_STS bit being set. 

1 = Enables ICH9 to cause an SCI when PCI_EXP_STS bit is set. This is used to 
allow the PCI Express* ports, including the link to the (G)MCH, to cause an SCI 
due to wake/PME events. 


RI_ EN — R/W. The value of this bit will be maintained through a G3 state and is not 
affected by a hard reset caused by a CF9h write. 

0 = Disable. 

1 = Enables the setting of the RI_STS to generate a wake event. 


Reserved 


TCOSCI_EN — R/W. 

0 = Disable. 

1 = Enables the setting of the TCOSCI_STS to generate an SCI. 
USB5_EN — R/W. 

0 = Disable. 

1 = Enables the setting of the USB5_STS to generate a wake event. 
USB2_EN — R/W. 

0 = Disable. 

1 = Enables the setting of the USB2_STS to generate a wake event. 
USB1_EN — R/W. 

0 = Disable. 

1 = Enables the setting of the USB1_STS to generate a wake event. 


SWGPE_EN— R/W. This bit allows software to control the assertion of SWGPE_STS 
bit. This bit This bit, when set to 1, enables the SW GPE function. If SWGPE_CTRL is 
written to a1, hardware will set SWGPE_STS (acts as a level input) 

If SWGPE_STS, SWGPE_EN, and SCI_EN are all 1's, an SCI will be generated 

If SWGPE_STS = 1, SWGPE_EN = 1, SCI_EN = 0, and GBL_SMI_EN = 1 then an 
SMI# will be generated 


HOT_PLUG_EN — R/W. 


0 = Disables SCI generation upon the HOT_PLUG_STS bit being set. 
1 = Enables the ICH9 to cause an SCI when the HOT_PLUG_STS bit is set. This is 
used to allow the PCI Express ports to cause an SCI due to hot-plug events. 


THRM_EN — R/W. 

0 = Disable. 

1 = Active assertion of the THRM# signal (as defined by the THRM_POL bit) will 
generate a power management event (SCI or SMI) if the THRM_STS bit is also 
set. 
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13.8.3.13  SMI_EN—SMI Control and Enable Register 


Note: 


1/O Address: PMBASE + 30h Attribute: R/W, R/WO, WO 
Default Value: | 00000000h Size: 32 bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


This register is symmetrical to the SMI status register. 


os 
31:28 | Reserved 
GPIO_UNLOCK_SMI_EN— R/WO. Setting this bit will cause the Intel |CH9 to 
generate an SMI# when the GPIO_UNLOCK_SMI_STS bit is set in the SMI_STS 
27 F - - ~ - 
register. 
Once written to ‘1’, this bit can only be cleared by PLTRST#. 


INTEL_USB2_EN — R/W. 


18 0 = Disable 
1 = Enables Intel-Specific USB2 SMI logic to cause SMI #. 
LEGACY_USB2_ EN — R/W. 
17 0 = Disable 
1 = Enables legacy USB2 logic to cause SMI #. 


PERI ODIC_EN — R/W. 

0 = Disable. 

1 = Enables the ICH9 to generate an SMI# when the PERIODIC_STS bit (PMBASE + 
34h, bit 14) is set in the SMI_STS register (PMBASE + 34h). 


TCO_EN — R/W. 

0 = Disables TCO logic generating an SMI #. Note that if the NMI2SMI_EN bit is set, 
SMls that are caused by re-routed NMIs will not be gated by the TCO_EN bit. Even 
if the TCO_EN bit is 0, NMIs will still be routed to cause SMIs. 

1 = Enables the TCO logic to generate SMI #. 


NOTE: This bit cannot be written once the TCO_LOCK bit is set. 


MCSMI_ENMicrocontroller SMI Enable (MCSMI_EN) — R/W. 
0 = Disable. 
11 1 = Enables ICH9 to trap accesses to the microcontroller range (62h or 66h) and 
generate an SMI#. Note that “trapped’ cycles will be claimed by the ICH9 on PCI, 
but not forwarded to LPC. 


Reserved 


BIOS Release (BIOS_RLS) — WO. 
0 = This bit will always return 0 on reads. Writes of 0 to this bit have no effect. 
1 = Enables the generation of an SCI interrupt for ACPI software when a one is written 
to this bit position by BIOS software. 
NOTE: GBL_STS being set will cause an SCI, even if the SCI_EN bit is not set. 
Software must take great care not to set the BIOS_RLS bit (which causes 
GBL_STS to be set) if the SCI handler is not in place. 
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Software SMI # Timer Enable (SWSMI_TMR_EN) — R/W. 

0 = Disable. Clearing the SWSMI_TMR_EN bit before the timer expires will reset the 
timer and the SMI# will not be generated. 

1 = Starts Software SMI# Timer. When the SWSMI timer expires (the timeout period 
depends upon the SWSMI_RATE_SEL bit setting), SWSMI_TMR_STS is set and an 
SMI# is generated. SWSMI_TMR_EN stays set until cleared by software. 


APMC_EN — R/W. 


0 = Disable. Writes to the APM_CNT register will not cause an SMI #. 
1 = Enables writes to the APM_CNT register to cause an SMI#. 


SLP_SMI_EN — R/W. 

0 = Disables the generation of SMI# on SLP_EN. Note that this bit must be 0 before 
the software attempts to transition the system into a sleep state by writing a 1 to 
the SLP_EN bit. 

1 = A write of 1 to the SLP_EN bit (bit 13 in PM1_CNT register) will generate an SMI #, 
and the system will not transition to the sleep state based on that write to the 
SLP_EN bit. 


LEGACY_USB_EN — R/W. 


0 = Disable. 
1 = Enables legacy USB circuit to cause SMI#. 


BIOS_EN — R/W. 


0 = Disable. 

1 = Enables the generation of SMI# when ACPI software writes a 1 to the GBL_RLS bit 
(D31:F0:PMBase + 04h: bit 2). Note that if the BIOS_STS bit (D31:FO:PMBase + 
34h: bit 2), which gets set when software writes 1 to GBL_RLS bit, is already a1 at 
the time that BlIOS_EN becomes 1, an SMI# will be generated when BIOS_EN gets 
set. 


End of SMI (EOS) — R/W (special). This bit controls the arbitration of the SMI signal 
to the processor. This bit must be set for the ICH9 to assert SMI # low to the processor 
after SMI# has been asserted previously. 

0 = Once the ICH9 asserts SMI # low, the EOS bit is automatically cleared. 

1 = When this bit is set to 1, SMI# signal will be deasserted for 4 PCI clocks before its 
assertion. In the SMI handler, the processor should clear all pending SMIs (by 
servicing them and then clearing their respective status bits), set the EOS bit, and 
exit SMM. This will allow the SMI arbiter to re-assert SMI upon detection of an SMI 
event and the setting of a SMI status bit. 


NOTE: ICH9 is able to generate 1st SMI after reset even though EOS bit is not set. 
Subsequent SMI require EOS bit is set. 


GBL_SMI_EN — R/W. 


0 = No SMI# will be generated by ICH9. This bit is reset by a PCI reset event. 
1 = Enables the generation of SMI# in the system upon any enabled SMI event. 
NOTE: When the SMI_LOCK bit is set, this bit cannot be changed. 
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13.8.3.14 SMI_STS—SMI Status Register 


Note: 


1/O Address: PMBASE + 34h Attribute: RO, R/WC 
Default Value: © 00000000h Size: 32-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Core 


If the corresponding _EN bit is set when the _STS bit is set, the |CH9 will cause an 
SMI # (except bits 8-10 and 12, which do not need enable bits since they are logic ORs 
of other registers that have enable bits). The |CH9 uses the same GPEO_EN register (1/ 
O address: PMBase+2Ch) to enable/disable both SMI and ACPI SCI general purpose 
input events. ACPI OS assumes that it owns the entire GPEO_EN register per ACPI spec. 
Problems arise when some of the general-purpose inputs are enabled as SMI by BIOS, 
and some of the general purpose inputs are enabled for SCI. In this case ACPI OS turns 
off the enabled bit for any GPIx input signals that are not indicated as SCI general- 
purpose events at boot, and exit from sleeping states. BIOS should define a dummy 
control method which prevents the ACPI OS from clearing the SMI GPEO_EN bits. 


a 


GPIO_UNLOCK_SMI_ STS — R/WC. This bit will be set if the GPIO registers lockdown 
logic is requesting an SMI#. Writing a ‘1’ to this bit position clears this bit to ‘0’. 


SPI_STS — RO. This bit will be set if the SPI logic is generating an SMI#. This bit is 
26 read only because the sticky status and enable bits associated with this function are 
located in the SPI registers. 


MONI TOR_ STS — RO. This bit will be set if the Trap/SMI logic has caused the SMI. 
This will occur when the processor or a bus master accesses an assigned register (or a 
sequence of accesses). See Section 10.1.43 through Section 10.1.49 for details on the 
specific cause of the SMI. 


PCI_EXP_SMI_STS — RO. PCI Express* SMI event occurred. This could be due to a 
PCI Express PME event or Hot-Plug event. 


Reserved 


corresponding enable bits. Additionally, the Port Disable Write Enable SMI is reported in 
this bit; the specific status bit for this event is contained in the USB Per-Port Registers 
Write Control Register in this |/O space. This bit will not be active if the enable bits are 
not set. Writes to this bit will have no effect. 


All integrated USB2 Host Controllers are represented with this bit. 


LEGACY_USB2_ STS — RO. This non-sticky read-only bit is a logical OR of each of the 
SMI status bits in the USB2 Legacy Support Register ANDed with the corresponding 
enable bits. This bit will not be active if the enable bits are not set. Writes to this bit will 
have no effect. 


All integrated USB2 Host Controllers are represented with this bit. 


INTEL_USB2_ STS — RO. This non-sticky read-only bit is a logical OR of each of the 
SMI status bits in the Intel-Specific USB2 SMI Status Register ANDed with the 
18 
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SMBus SMI Status (SMBUS_SMI_STS) — R/WC. Software clears this bit by writing 
a 1 to it. 


0 = This bit is set from the 64 kHz clock domain used by the SMBus. Software must 
wait at least 15.63 us after the initial assertion of this bit before clearing it. 
1 = Indicates that the SMI# was caused by: 
1. The SMBus Slave receiving a message that an SMI# should be caused, or 
2. The SMBALERT# signal goes active and the SMB_SMI_EN bit is set and the 
SMBALERT_DIS bit is cleared, or 
3. The SMBus Slave receiving a Host Notify message and the 
HOST_NOTIFY_INTREN and 
the SMB_SMI_EN bits are set, or 
4. The ICH9 detecting the SMLINK_SLAVE_SMI command while in the SO state. 


SERIRQ_SMI_STS — RO. 


0 = SMI# was not caused by the SERIRQ decoder. 
1 = Indicates that the SMI# was caused by the SERIRQ decoder. 
NOTE: This is not a sticky bit 


PERI ODIC_STS — R/WC. Software clears this bit by writing a 1 to it. 


0 = Software clears this bit by writing a 1 to it. 
1 = This bit is set at the rate determined by the PER_SMI_SEL bits. If the 
PERIODIC_EN bit (PMBASE + 30h, bit 14) is also set, the |CH9 generates an SMI#. 


TCO_STS — R/WC. Software clears this bit by writing a 1 to it. 


0 = SMI# not caused by TCO logic. 
1 = Indicates the SMI# was caused by the TCO logic. Note that this is not a wake 
event. 


Device Monitor Status (DEVMON_STS) — RO. 


0 = SMI# not caused by Device Monitor. 
1 = Set if bit O of the DEVACT_STS register (PMBASE + 44h) is set. The bit is not sticky, 
so writes to this bit will have no effect. 


Microcontroller SMI # Status (MCSMI_STS) — R/WC. Software clears this bit by 

writing a 1 to it. 

0 = Indicates that there has been no access to the power management microcontroller 
range (62h or 66h). 

1 = Set if there has been an access to the power management microcontroller range 
(62h or 66h) and the Microcontroller Decode Enable #1 bit in the LPC Bridge I/O 
Enables configuration register is 1 (D31:FO: Offset 82h: bit 11). Note that this 
implementation assumes that the Microcontroller is on LPC. If this bit is set, and 
the MCSMI_EN bit is also set, the ICH9 will generate an SMI#. 


GPEO_ STS — RO. This bit is a logical OR of the bits in the ALT_GP_SMI_STS register 
that are also set up to cause an SMI# (as indicated by the GPI_ROUT registers) and 
have the corresponding bit set in the ALT_GP_SMI_EN register. Bits that are not 
routed to cause an SMI# will have no effect on this bit. 

0 = SMI# was not generated by a GPI assertion. 

1 = SMI# was generated by a GPI assertion. 


GPEO_ STS — RO. This bit is a logical OR of the bits 47:32, 14:10, 8, 6:2 and 0 in the 
GPEO_STS register (PMBASE + 28h) that also have the corresponding bit set in the 
GPEO_EN register (PMBASE + 2Ch). 

0 = SMI# was not generated by a GPEO event. 

1 = SMI# was generated by a GPEO event. 


PM1_STS_REG — RO. This is an ORs of the bits in the ACPI PM1 Status Register 
(offset PMBASE+00h) that can cause an SMI#. 


0 = SMI# was not generated by a PM1_STS event. 
1 = SMI# was generated by a PM1_STS event. 
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Reserved 


SWSMI_TMR_STS — R/WC. Software clears this bit by writing a 1 to it. 
0 = Software SMI# Timer has Not expired. 

1 = Set by the hardware when the Software SMI# Timer expires. 
APM_STS — R/WC. Software clears this bit by writing a 1 to it. 


0 = No SMI# generated by write access to APM Control register with APMCH_EN bit set. 
1 = SMI# was generated by a write access to the APM Control register with the 
APMC_EN bit set. 


SLP_SMI_STS — R/WC. Software clears this bit by writing a 1 to the bit location. 


0 = No SMI# caused by write of 1 to SLP_EN bit when SLP_SMI_EN bit is also set. 
1 = Indicates an SMI# was caused by a write of 1 to SLP_EN bit when SLP_SMI_EN bit 


is also set. 


LEGACY_USB_STS — RO. This bit is a logical OR of each of the SMI status bits in the 
USB Legacy Keyboard/Mouse Control Registers ANDed with the corresponding enable 
bits. This bit will not be active if the enable bits are not set. 

0 = SMI# was not generated by USB Legacy event. 

1 = SMI# was generated by USB Legacy event. 


BIOS_ STS — R/WC. 


0 = No SMI# generated due to ACPI software requesting attention. 

1 = This bit gets set by hardware when a 1 is written by software to the GBL_RLS bit 
(D31:F0:PMBase + 04h: bit 2). When both the BIOS_EN bit (D31:FO: PMBase + 
30h: bit 2) and the BIOS_STS bit are set, an SMI# will be generated. The 
BIOS_STS bit is cleared when software writes a 1 to its bit position. 


13.8.3.15 ALT_GP_SMI_EN—Alternate GPI SMI Enable Register 





1/O Address: PMBASE +38h Attribute: R/W 

Default Value: 0000h Size: 16-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Resume 


a 


Alternate GPI SMI Enable — R/W. These bits are used to enable the corresponding 
GPIO to cause an SMI#. For these bits to have any effect, the following must be true. 


¢ The corresponding bit in the ALT_GP_SMI_EN register is set. 
¢ The corresponding GP! must be routed in the GPI_ROUT register to cause an SMI. 
¢ The corresponding GPIO must be implemented. 
NOTE: Mapping is as follows: bit 15 corresponds to GPIO15... bit 0 corresponds to 
GPIOO. 
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13.8.3.16 ALT_GP_SMI_STS—Alternate GPI SMI Status Register 


1/O Address: PMBASE +3Ah Attribute: R/WC 

Default Value: 0000h Size: 16-bit 
Lockable: No Usage: ACPI or Legacy 
Power Well: Resume 


Alternate GPI SMI Status — R/WC. These bits report the status of the corresponding 
GPIOs. 


0 = Inactive. Software clears this bit by writing a 1 to it. 
1 = Active 


These bits are sticky. If the following conditions are true, then an SMI# will be 
generated and the GPEO_STS bit set: 

¢ The corresponding bit in the ALT_GPI_SMI_EN register (PMBASE + 38h) is set 

¢ The corresponding GPIO must be routed in the GPI_ROUT register to cause an SMI. 

¢« The corresponding GPIO must be implemented. 
All bits are in the resume well. Default for these bits is dependent on the state of the 
GPIO pins. 





13.8.3.17 UPRWC—USB Per-Port Registers Write Control 


1/O Address: PMBASE +3Ch Attribute: R/WC, R/W, R/WO 
Default Value: 0000h Size: 16-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Resume 


[aes 
Write Enable Status — R/WC 
0 = This bit gets set by hardware when the “Per-Port Registers Write Enable” bit is 
written from 0 to 1 
1 = This bit is cleared by software writing a 1b to this bit location 
The setting condition takes precedence over the clearing condition in the event that 
both occur at once. 
When this bit is 1b and bit 0 is 1b, the INTEL_USB2_STS bit is set in the SMI_STS 
aa 
a 


register. 


Reserved. 


Reserved 


Write Enable SMI Enable— R/WO 

0 = Disable 

1 = enables the generation of SMI when the Per-Port Registers Write Enable (bit 1) is 
written from 0 to 1. Once written to 1b, this bit can not be cleared by software. 
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13.8.3.18 


13.8.3.19 


Note: 


GPE_CNTL— General Purpose Control Register 


1/O Address: PMBASE +42h Attribute: R/W 

Default Value: 00h Size: 8-bit 

Lockable: No Usage: ACPI or Legacy 
Power Well: Resume 


El nes 2. 


8:2 Reserved 


SWGPE_CTRL— R/W. This bit allows software to control the assertion of SWGPE_STS 
bit. This bit is used by hardware as the level input signal for the SWGPE_STS bit in the 
1 


GPEO_STS register. When SWGPE_CTRL is 1, SWGPE_STS will be set to 1, and writes to 
SWGPE_STS with a value of 1 to 


clear SWGPE_STS will result in SWGPE_STS being set back to 1 by hardware. When 
SWGPE_CTRL is 0, writes to SWGPE_STS with a value of 1 will clear SWGPE_STS to 0. 


THRM#_ POL — R/W. This bit controls the polarity of the THRM# pin needed to set the 
THRM_STS bit. 
0 = Low value on the THRM# signal will set the THRM_STS bit. 


1 = HIGH value on the THRM# signal will set the THRM_STS bit. 





DEVACT_STS — Device Activity Status Register 


1/O Address: PMBASE +44h Attribute: R/WC 
Default Value: | 0000h Size: 16-bit 
Lockable: No Usage: Legacy Only 
Power Well: Core 


Each bit indicates if an access has occurred to the corresponding device's trap range, or 
for bits 6:9 if the corresponding PCI interrupt is active. This register is used in 
conjunction with the Periodic SMI# timer to detect any system activity for legacy power 
management. The periodic SMI # timer indicates if it is the right time to read the 
DEVACT_STS register (PMBASE + 44h). 


Software clears bits that are set in this register by writing a 1 to the bit position. 


KBC_ACT_STS — R/WC. KBC (60/64h). 
12 0 = Indicates that there has been no access to this device’s I/O range. 
1 = This device’s I/O range has been accessed. Clear this bit by writing a 1 to the bit 


location. 


PIRQDH_ACT_STS — R/WC. PIRQ[D or H]. 
0 = The corresponding PCI interrupts have not been active. 


PIRQCG_ ACT_STS — R/WC. PIRQ[C or G]. 

0 = The corresponding PCI interrupts have not been active. 

1 = At least one of the corresponding PCI interrupts has been active. Clear this bit by 
writing a 1 to the bit location. 





1 = At least one of the corresponding PCI interrupts has been active. Clear this bit by 
writing a 1 to the bit location. 
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PIRQBF_ACT_STS — R/WC. PIRQ[B or F]. 


0 = The corresponding PCI interrupts have not been active. 
1 = At least one of the corresponding PCI interrupts has been active. Clear this bit by 
writing a 1 to the bit location. 


PIRQAE_ACT_STS — R/WC. PIRQIA or El. 


0 = The corresponding PCI interrupts have not been active. 
1 = At least one of the corresponding PCI interrupts has been active. Clear this bit by 
writing a 1 to the bit location. 


13.8.3.20 PM2_CNT—Power Management 2 Control (Mobile Only) 
1/O Address: PMBASE + 50h 





(ACPI PM2_CNT_BLK) Attribute: R/W 
Default Value: 00h Size: 8-bit 
Lockable: No Usage: ACPI 
Power Well: Core 


a 
Reserved 


Arbiter Disable (ARB_ DIS) — R/W This bit is essentially just a scratchpad bit for 
legacy software compatibility. Software typically sets this bit to 1 prior to entering a C3 
or C4 state. When a transition to a C3 or C4 state occurs, ICH9 will automatically 


prevent any internal or external non-Isoch bus masters from initiating any cycles up to 
the (G)MCH. This blocking starts immediately upon the ICH9 sending the Go-C3 
message to the (G)MCH. The blocking stops when the Ack-C2 message is received. 
Note that this is not really blocking, in that messages (such as from PCI Express*) are 
just queued and held pending. 





13.8.3.21 C3_RES— C3 Residency Register (Mobile Only) 


1/O Address: PMBASE +54h Attribute: RO 

Default Value 00000000h Size: 32-bit 
Lockable: No Usage: ACPI/Legacy 
Power Well: Core 


Software may only write this register during system initialization to set the state of the 
C3_RESIDENCY_MODE bit. It must not be written while the timer is in use. 


Pe ante 


C3_ RESIDENCY — RO. The value in this field increments at the same rate as the 

Power Management Timer. This field increments while STP_CPU# is active (i.e., the 

processor is in a C3 or C4 state). This field will roll over in the same way as the PM 
23:0 


Timer, however the most significant bit is NOT sticky. 


Software is responsible for reading this field before performing the LvI3/4 transition. 
Software must also check for rollover if the maximum time in C3/C4 could be 
exceeded. 

NOTE: Hardware reset is the only reset of this counter field. 
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13.8.3.22 C5 RES— C5 Residency Register (Mobile Only) 


1/O Address: PMBASE +58h Attribute: RO 

Default Value 00000000h Size: 32-bit 
Lockable: No Usage: ACPI/Legacy 
Power Well: Core 


ee a 
31:24 | Reserved 


C5_ RESIDENCY — RO. The value in this field increments at the same rate as the 
Power Management Timer. This field will roll over in the same way as the PM Timer, 
23:0 however the most significant bit is NOT sticky. 


Software is responsible for reading this field before performing the LvI5 transition. 
Software must also check for rollover if the maximum time in C5 could be exceeded. 
NOTE: Hardware reset is the only reset of this counter field. 
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13.9 System Management TCO Registers (D31:FO) 


The TCO logic is accessed via registers mapped to the PCI configuration space (Device 
31: Function 0) and the system I/O space. For TCO PCI Configuration registers, see LPC 
Device 31:Function 0 PCI Configuration registers. 


TCO Register I/O Map 


The TCO I/O registers reside in a 32-byte range pointed to by a TCOBASE value, which 
is, PMBASE + 60h in the PCI config space. The following table shows the mapping of 
the registers within that 32-byte range. Each register is described in the following 
sections. 


Table 13-12. TCO I/ O Register Address Map 


TCOBASE ; 
0Oh-O01h TCO_RLD Ler Reload and Current 0000h 


03h TCO_DAT_OUT | TCO Data Out 
04h-05h TCO1_STS TCO1 Status 0000h R/WC, RO 
O6h-07h TCO2_STS TCO2 Status 0000h R/WC 


R/W, 
O08h-09h TCO1 Control 0000h R/WLO, R/WC 


13.9.1 TCO _RLD—TCO Timer Reload and Current Value Register 





1/O Address: TCOBASE +00h Attribute: R/W 
Default Value: | 0000h Size: 16-bit 
Lockable: No Power Well: Core 


a 


timer. Writing any value to this register will reload the timer to prevent the timeout. 





} 0 | TCO Timer Value — R/W. Reading this register will return the current count of the TCO 
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13.9.2 TCO_DAT_IN—TCO Data In Register 


1/O Address: TCOBASE +02h Attribute: R/W 
Default Value: 00h Size: 8- bit 
Lockable: No Power Well: Core 


TCO Data In Value — R/W. This data register field is used for passing commands from 


the OS to the SMI handler. Writes to this register will cause an SMI and set the 
SW_TCO_SMI bit in the TCO1_STS register (D31:F0:04h). 





13.9.3 TCO_DAT_OUT—TCO Data Out Register 


1/O Address: TCOBASE +03h Attribute: R/W 
Default Value: 00h Size: 8- bit 
Lockable: No Power Well: Core 


TCO Data Out Value — R/W. This data register field is used for passing commands 
from the SMI handler to the OS. Writes to this register will set the TCO_INT_STS bit in 
the TCO_STS register. It will also cause an interrupt, as selected by the TCO_INT_SEL 
bits. 





13.9.4 TCO1_ STS—TCO1 Status Register 


1/O Address: TCOBASE +04h Attribute: R/WC, RO 
Default Value: 0000h Size: 16-bit 
Lockable: No Power Well: Core 


(Except bit 7, in RTC) 


[a eee, 


DMISERR_ STS — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = 1CH9 received a DMI special cycle message via DMI indicating that it wants to 
cause an SERR#. The software must read the (G)MCH to determine the reason for 
the SERR#. 


Reserved 


DMISMI_ STS — R/WC. 
0 = Software clears this bit by writing a 1 to it. 
10 1 = 1CH9 received a DMI special cycle message via DMI indicating that it wants to 


cause an SMI. The software must read the (G)MCH to determine the reason for the 
SMI. 


DMISCI_ STS — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = 1CH9 received a DMI special cycle message via DMI indicating that it wants to 
cause an SCI. The software must read the (G)MCH to determine the reason for the 
SCl. 
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BIOSWR_STS — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = 1CH9 sets this bit and generates and SMI # to indicate an invalid attempt to write to 
the BIOS. This occurs when either: 
a) The BIOSWP bit is changed from 0 to 1 and the BLD bit is also set, or 
b) any write is attempted to the BIOS and the BIOSWP bit is also set. 
NOTE: On write cycles attempted to the 4 MB lower alias to the BIOS space, the 
BIOSWR_STS will not be set. 


NEWCENTURY_ STS — R/WC. This bit is in the RTC well. 


0 = Cleared by writing a 1 to the bit position or by RTCRST# going active. 
1 = This bit is set when the Year byte (RTC I/O space, index offset 09h) rolls over from 
99 to 00. Setting this bit will cause an SMI# (but not a wake event). 


NOTE: The NEWCENTURY_STS bit is not valid when the RTC battery is first installed (or 
when RTC power has not been maintained). Software can determine if RTC 
power has not been maintained by checking the RTC_PWR_STS bit 
(D31:F0:A4h, bit 2), or by other means (such as a checksum on RTC RAM). If 
RTC power is determined to have not been maintained, BIOS should set the 
time to a valid value and then clear the NEWCENTURY_STS bit. 


The NEWCENTURY_STS bit may take up to 3 RTC clocks for the bit to be cleared after a 


1 is written to the bit to clear it. After writing a 1 to this bit, software should not exit the 
SMI handler until verifying that the bit has actually been cleared. This will ensure that 
the SMI is not re-entered. 


TIMEOUT — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set by ICH9 to indicate that the SMI was caused by the TCO timer reaching 0. 
TCO_INT_STS — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = SMI handler caused the interrupt by writing to the TCO_DAT_OUT register 
(TCOBASE + 03h). 


SW_TCO_SMI — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = Software caused an SMI# by writing to the TCO_DAT_IN register (TCOBASE + 
02h). 


NMI2SMI_STS — RO. 


0 = Cleared by clearing the associated NMI status bit. 
1 = Set by the ICH9 when an SMI# occurs because an event occurred that would 
otherwise have caused an NMI (because NMI2SMI_EN is set). 





528 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


® 
LPC Interface Bridge Registers (D31:FO) j n tel 


13.9.5 


TCO2_STS—TCO2 Status Register 


1/O Address: TCOBASE +06h Attribute: R/WC 
Default Value: | 0000h Size: 16-bit 
Lockable: No Power Well: Resume 


(Except Bit 0, in RTC) 


a 


15:8 | Reserved 


ME Host Reset Warm Status (ME_HRST_WARM_ STS) — R/WC. This bit is set 
when the Management Engine generates a Host reset without power cycling. Software 
clears this bit by writing a 1 to this bit position. 


ME Host Reset Cold Status (ME_HRST_COLD_ STS) — R/WC. This bit is set when 
the Management Engine generates a Host reset with power cycling. Software clears this 
bit by writing a 1 to this bit position. 


ME WAKE STATUS (ME_WAKE_ STS) — R/WC. This bit is set when the Management 
Engine generates a Non-Maskable wake event, and is not affected by any other enable 
bit. When this bit is set, the Host Power Management logic wakes to SO. 


This bit is only set by hardware and can only be reset by writing a one to this bit 
position. This bit is not affected by hard resets caused by a CF9h write, but is reset by 
RSMRST. 


SMLink Slave SMI Status (SMLINK_SLV_SMI_ STS) — R/WC. Allow the software to 

go directly into pre-determined sleep state. This avoids race conditions. Software clears 

this bit by writing a 1 to it. 

0 = The bit is reset by RSMRST#, but not due to the PCI Reset associated with exit 
from S3-S5 states. 

1 = 1CH9 sets this bit to 1 when it receives the SMI message on the SMLink's Slave 
Interface. 


5 

BOOT_STS — R/WC. 

0 = Cleared by ICH9 based on RSMRST# or by software writing a 1 to this bit. Note 
that software should first clear the SECOND_TO_STS bit before writing a 1 to clear 
the BOOT_STS bit. 

2 


1 = Set to 1 when the SECOND_TO_STS bit goes from 0 to 1 and the processor has not 
fetched the first instruction. 

If rebooting due to a second TCO timer timeout, and if the BOOT_STS bit is set, the 

ICH9 will reboot using the ‘safe’ multiplier (1111). This allows the system to recover 

from a processor frequency multiplier that is too high, and allows the BIOS to check the 

BOOT_STS bit at boot. If the bit is set and the frequency multiplier is 1111, then the 

BIOS knows that the processor has been programmed to an invalid multiplier. 


SECOND_TO_ STS — R/WC. 

0 = Software clears this bit by writing a 1 to it, or by a RSMRST#. 

1 = 1CH9 sets this bit to 1 to indicate that the TIMEOUT bit had been (or is currently) 
set and a second timeout occurred before the TCO_RLD register was written. If this 
bit is set and the NO_REBOOT config bit is 0, then the ICH9 will reboot the system 
after the second timeout. The reboot is done by asserting PLTRST#. 
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Intruder Detect (INTRD_DET) — R/WC. 


0 = Software clears this bit by writing a 1 to it, or by RTCRST# assertion. 
1 = Set by ICH9 to indicate that an intrusion was detected. This bit is set even if the 
system is in G3 state. 


NOTES: 

1. This bit has a recovery time. After writing a 1 to this bit position (to clear it), the bit 
may be read back as a 1 for up 65 microseconds before it is read as a 0. Software 
must be aware of this recovery time when reading this bit after clearing it. 

2. If the INTRUDER# signal is active when the software attempts to clear the 
INTRD_DET bit, the bit will remain as a1, and the SMI# will be generated again 
immediately. The SMI handler can clear the INTRD_SEL bits (TCOBASE + OAh, bits 
2:1), to avoid further SMIs. However, if the INTRUDER# signals goes inactive and 
then active again, there will not be further SMI’s (because the INTRD_SEL bits 
would select that no SMI# be generated). 

If the INTRUDER# signal goes inactive some point after the INTRD_DET bit is 
written as a 1, then the INTRD_DET signal will go to a 0 when INTRUDER# input 
signal goes inactive. Note that this is slightly different than a classic sticky bit, since 
most sticky bits would remain active indefinitely when the signal goes active and 
would immediately go inactive when a 1 is written to the bit 
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13.9.6 TCO1_CNT—TCO1 Control Register 


1/O Address: TCOBASE +08h Attribute: R/W, R/WLO, R/WC 
Default Value: | 0000h Size: 16-bit 
Lockable: No Power Well: Core 


a 
15:13 | Reserved 


TCO_LOCK — R/WLO. When set to 1, this bit prevents writes from changing the 
TCO_EN bit (in offset 30h of Power Management I/O space). Once this bit is set to 1, it 
can not be cleared by software writing a 0 to this bit location. A core-well reset is 
required to change this bit from 1 to 0. This bit defaults to 0. 

TCO Timer Halt (TCO_TMR_HLT) — R/W. 


0 = The TCO Timer is enabled to count. 

1 = The TCO Timer will halt. It will not count, and thus cannot reach a value that will 
cause an SMI# or set the SECOND_TO_STS bit. When set, this bit will prevent 
rebooting and prevent Alert On LAN event messages from being transmitted on the 
SMLINK (but not Alert On LAN* heartbeat messages). 


NMI2SMI_EN — R/W. 

0 = Normal NMI functionality. 

1 = Forces all NMIs to instead cause SMIs. The functionality of this bit is dependent 
upon the settings of the NMI_EN bit and the GBL_SMI_EN bit as detailed in the 
following table: 


NMI_EN GBL_SMI_EN Description 
Ob Ob No SMI# at all because GBL_SMI_EN = 0 
Ob 1b SMI # will be caused due to NMI events 
1b Ob No SMI# at all because GBL_SMI_EN = 0 
1b 1b No SMI# due to NMI because NMI_EN = 1 


NMI_ NOW — R/WC. 

0 = Software clears this bit by writing a 1 to it. The NMI handler is expected to clear 
this bit. Another NMI will not be generated until the bit is cleared. 

1 = Writing a 1 to this bit causes an NMI. This allows the BIOS or SMI handler to force 
an entry to the NMI handler. 


Reserved 
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13.9.7 


13.9.8 
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TCO2_CNT—TCO2 Control Register 


1/O Address: TCOBASE +0Ah Attribute: R/W 
Default Value: 0008h Size: 16-bit 
Lockable: No Power Well: Resume 


OS_ POLICY — R/W. OS-based software writes to these bits to select the policy that 
the BIOS will use after the platform resets due the WDT. The following convention is 
recommended for the BIOS and OS: 
00 = Boot normally 
5:4 01 = Shut down 
, 10 = Don't load OS. Hold in pre-boot state and use LAN to determine next step 
11 = Reserved 
NOTE: These are just scratchpad bits. They should not be reset when the TCO logic 
resets the platform due to Watchdog Timer. 


GPIO11_ALERT_DISABLE — R/W. At reset (via RSMRST# asserted) this bit is set 
and GPIO[11] alerts are disabled. 


0 = Enable. 
1 = Disable GPIO11/SMBALERT# as an alert source for the heartbeats and the SMBus 
slave. 


INTRD_ SEL — R/W. This field selects the action to take if the INTRUDER# signal goes 
active. 

00 = No interrupt or SMI# 

01 = Interrupt (as selected by TCO_INT_SEL). 

10 = SMI 

11 = Reserved 


TCO_MESSAGE1 and TCO_ MESSAGE2 Registers 





1/O Address: TCOBASE +0Ch (Message 1)Attribute: R/W 
TCOBASE +0Dh (Message 2) 

Default Value: 00h Size: 8-bit 

Lockable: No Power Well: Resume 


pee | eT 


TCO_MESSAGE[n] — R/W. BIOS can write into these registers to indicate its boot 
progress. The external microcontroller can read these registers to monitor the boot 
progress 
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13.9.9 TCO _WDCNT—TCO Watchdog Control Register 


Offset Address: TCOBASE + OEh Attribute: R/W 
Default Value: 00h Size: 8 bits 
Power Well: Resume 


ES ar 


The BIOS or system management software can write into this register to indicate more 


details on the boot progress. The register will reset to 00h based on a RSMRST# (but 
not PLTRST#). The external microcontroller can read this register to monitor boot 
progress. 





13.9.10 SW_IRQ_ GEN—Software IRQ Generation Register 


Offset Address: TCOBASE + 10h Attribute: R/W 
Default Value: 03h Size: 8 bits 
Power Well: Core 


Description 
Reserved 


I1RQ12_ CAUSE — R/W. When software sets this bit to 1, 1RQ12 will be asserted. When 
software sets this bit to 0, I|RQ12 will be deasserted. 


IRQ1_CAUSE — R/W. When software sets this bit to 1, [RQ1 will be asserted. When 
software sets this bit to 0, IRQ1 will be deasserted. 








13.9.11 TCO_TMR—TCO Timer Initial Value Register 


1/O Address: TCOBASE +12h Attribute: R/W 
Default Value: 0004h Size: 16-bit 
Lockable: No Power Well: Core 


a 


TCO Timer Initial Value — R/W. Value that is loaded into the timer each time the 
TCO_RLD register is written. Values of 0000h or 0001h will be ignored and should not 


be attempted. The timer is clocked at approximately 0.6 seconds, and thus allows 
timeouts ranging from 1.2 second to 613.8 seconds. Note: The timer has an error of 
+1 tick (0.6s). 


The TCO Timer will only count down in the SO state. 
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13.10 General Purpose I/O Registers (D31:FO) 


The control for the general purpose I/O signals is handled through a separate 64-byte 
1/O space. The base offset for this space is selected by the GPIOBASE register. 


Table 13-13. Registers to Control GPIO Address Map 
GPI OBASE j 


197F75FEh 

(Desktop) / 

00h-03h GPIO_USE_SEL __| GPIO Use Select oo 
(Mobile) 

EOEAGFFFh 

04h-07h GP_10_SEL GPIO Input/Output Select Cease 

=" E1EAGFFFh 
(mobile) 


E2FEEFFFh 

GPIO Level for Input or (Desktop) / 

ChSOEn or. Output E3DEEFFFh 
(Mobile) 


Pao [ieee 
Pasam [= ‘reeves i 
Oe 


070300FFh 
; (Desktop) / 
30h- 33h GPIO_USE_SEL2 GPIO Use Select 2 [60:32] 070300FEh R/W 
(Mobile) 


34h-37h GP_10_SEL2 Se a Select?” | Sa55RRFOn 


LFFEFFF3h 

: GPIO Level for Input or (Desktop) / 

dla Grobyhe Output 2 [60:32] OEFFFFF3h 
(Mobile) 
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13.10.1 GPIO_USE_SEL—GPIO Use Select Register [31:0] 


Offset Address: GPIOBASE + 00h Attribute: R/W 
Default Value: 197F75FFh (Desktop) Size: 32-bit 
187E75FFh (Mobile) 
Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


7 ee ee 


GPIO_USE_SEL[31:0] — R/W. Each bit in this register enables the corresponding 
GPIO (if it exists) to be used as a GPIO, rather than for the native function. 


0 = Signal used as native function. 

1 = Signal used as a GPIO. 

NOTES: 
The following bits are always 1 because they are always unMultiplexed: 8, 12, 
13, 17, 18, 20, 27 and 28. The following bits are always 1 in mobile: 1, 6, 7, 17. 
If GPIO[n] does not exist, then, the n-bit in this register will always read as 0 
and writes will have no effect. The following bits are always 0 in mobile: 15 and 


25. 

After a full reset (RSMRST#) all multiplexed signals in the resume and core 
wells are configured as their default function. After only a PLTRST#, the GPIOs 
in the core well are configured as their default function. 

When configured to GPIO mode, the muxing logic will present the inactive state 
to native logic that uses the pin as an input. 

All GPIOs are reset to the default state by CF9h reset except GPIO24. 

Bit 26 may be overridden by bit 8 in the GEN_PMCON_3 Register. 

If the GPIO use is configured by an SPI soft strap the corresponding bit in this 
register is ignored. This applies to the following mobile bit: 12. 





13.10.2 GP_!1O_ SEL—GPIO Input/ Output Select Register [31:0] 


Offset Address: GPIOBASE +04h Attribute: R/W 
Default Value: EOEA6FFFh (Desktop) Size: 32-bit 
E1EA6FFFh (Mobile) 
Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


as 


GP_1O0_SEL[31:0] — R/W. 
When configured in native mode (GPIO_USE_SEL[n] is 0), writes to these bits have 


no effect. The value reported in this register is undefined when programmed as 
native mode. 


0 = Output. The corresponding GPIO signal is an output. 
1 = Input. The corresponding GPIO signal is an input. 
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13.10.3 GP_LVL—GPIO Level for Input or Output Register [31:0] 


Offset Address: GPIOBASE +0Ch Attribute: R/W 
Default Value: E2FEEFFFh (Desktop) Size: 32-bit 
E3DEEFFFh (Mobile) 
Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


as 


GP_LVL[31:0]— R/W. 

If GPIO[n] is programmed to be an output (via the corresponding bit in the 
GP_IO_SEL register), then the corresponding GP_LVL[n] bit can be updated by 
software to drive a high or low value on the output pin. 1 = high, 0 = low. 


If GPIO[n] is programmed as an input, then the corresponding GP_LVL bit reflects the 
state of the input signal (1 = high, 0 = low.) and writes will have no effect. 

When configured in native mode (GPIO_USE_SEL[n] is 0), writes to these bits have 
no effect. The value reported in this register is undefined when programmed as 
native mode. 





13.10.4 GPO_BLINK—GPO Blink Enable Register [31:0] 


Offset Address: GPIOBASE +18h Attribute: R/W 
Default Value: | 00040000h Size: 32-bit 
Lockable: No Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


a 


GP_BLINK[31:0] — R/W. The setting of this bit has no effect if the corresponding 

GPIO signal is programmed as an input. 

0 = The corresponding GPIO will function normally. 

1 = If the corresponding GPIO is programmed as an output, the output signal will 
blink at a rate of approximately once per second. The high and low times have 
approximately 0.5 seconds each. The GP_LVL bit is not altered when this bit is 


set. 


The value of the corresponding GP_LVL bit remains unchanged during the blink 
process, and does not effect the blink in any way. The GP_LVL bit is not altered 
when programmed to blink. It will remain at its previous value. 

These bits correspond to GPIO in the Resume well. These bits revert to the default 
value based on RSMRST# or a write to the CF9h register (but not just on 
PLTRST#). 





NOTE: GPIO18 will blink by default immediately after reset. This signal could be connected to an 
LED to indicate a failed boot (by programming BIOS to clear GP_BLINK18 after successful 
POST). 
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13.10.5 GP_SER_BLINK[31:0]—GP Serial Blink [31:0] 


Offset Address: GPIOBASE +1Ch Attribute: R/W 
Default Value: 00000000h Size: 32-bit 
Lockable: No Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


a 


GP_SER_BLINK[31:0] — R/W. The setting of this bit has no effect if the 
corresponding GPIO is programmed as an input or if the corresponding GPIO has 
the GPO_BLINK bit set. 


When set to a ‘0’, the corresponding GPIO will function normally. 


When using serial blink, this bit should be set to a 1 while the corresponding 
GP_IO_SEL bit is set to 1. Setting the GP_IO_SEL bit to 0 after the GP_SER_BLINK 


bit ensures ICH will not drive a 1 on the pin as an output. When this corresponding 
bit is set to a 1 and the pin is configured to output mode, the serial blink capability 
is enabled. The ICH will serialize messages through an open-drain buffer 
configuration. 

The value of the corresponding GP_LVL bit remains unchanged and does not impact 
the serial blink capability in any way. 

Writes to this register have no effect when the corresponding pin is configured in 
native mode and the read value returned is undefined. 
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13.10.6 GP_SB_CMDSTS[31:0]—GP Serial Blink Command Status 


[31:0] 

Offset Address: GPIOBASE +20h Attribute: R/W, RO 
Default Value: 00080000h Size: 32-bit 
Lockable: No Power Well: Core 


oe 


Data Length Select (DLS) — R/W. This field determines the number of bytes to 
serialize on GPIO 
00 = Serialize bits 7:0 of GP_SB_DATA (1 byte) 
01 = Serialize bits 15:0 of GP_SB_DATA (2 bytes) 
23:22 10 = Undefined - Software must not write this value 
11 = Serialize bits 31:0 of GP_SB_DATA (4 bytes) 
Software should not modify the value in this register unless the Busy bit is clear. 


Writes to this register have no effect when the corresponding pin is configured in 
native mode and the read value returned is undefined. 


Data Rate Select (DRS) — R/W. This field selects the number of 120ns time 
intervals to count between Manchester data transitions. The default of 8h results in 
21:16 a 960ns minimum time between transitions. A value of Oh in this register produces 


undefined behavior. 
Software should not modify the value in this register unless the Busy bit is clear. 


Reserved 


Busy — RO. This read-only status bit is the hardware indication that a serialization 
is in progress. Hardware sets this bit to 1 based on the Go bit being set. Hardware 
clears this bit when the Go bit is cleared by the hardware. 


Go — R/W. This bit is set to 1 by software to start the serialization process. 
Hardware clears the bit after the serialized data is sent. Writes of 0 to this register 


have no effect. Software should not write this bit to 1 unless the Busy status bit is 
cleared. 





13.10.7 GP_SB_DATA[31:0]—GP Serial Blink Data [31:0] 


Offset Address: GPIOBASE +24h Attribute: R/W 
Default Value: 00000000h Size: 32-bit 
Lockable: No Power Well: Core 


a 


GP_SB_DATA[31:0] — R/W. This register contains the data serialized out. The 


number of bits shifted out are selected through the DLS field in the GP_SB_CMDSTS 
register. This register should not be modified by software when the Busy bit is set. 
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13.10.8 GPI_!INV—GPIO Signal Invert Register [31:0] 


Offset Address: GPIOBASE +2Ch Attribute: R/W 

Default Value: 00000000h Size: 32-bit 

Lockable: No Power Well: CPU |/O for 17, Core for 
16, 7:0 


Input Inversion (GP_INV[n]) — R/W. This bit only has effect if the corresponding 
GPIO is used as an input and used by the GPE logic, where the polarity matters. When 
set to ‘1’, then the GPI is inverted as it is sent to the GPE logic that is using it. This bit 
has no effect on the value that is reported in the GP_LVL register. 
These bits are used to allow both active-low and active-high inputs to cause SMI # or 
SCI. Note that in the SO or S1 state, the input signal must be active for at least two PCI 
clocks to ensure detection by the ICH9. In the S3, S4 or S5 states the input signal must 
be active for at least 2 RTC clocks to ensure detection. The setting of these bits has no 
effect if the corresponding GPIO is programmed as an output. These bits correspond to 
GPI that are in the resume well, and will be reset to their default values by RSMRST# or 
by a write to the CF9h register. 
0 = The corresponding GPI_STS bit is set when the |CH9 detects the state of the input 
pin to be high. 
1 = The corresponding GPI_STS bit is set when the |CH9 detects the state of the input 
pin to be low. 





13.10.9 GPIO_USE_SEL2—GPIO Use Select 2 Register [60:32] 


Offset Address: GPIOBASE +30h Attribute: R/W 
Default Value: | 070300FFh (Desktop) Size: 32-bit 
070300FEh (Mobile) 
Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


pee sero 
31:29 | Always 0. No corresponding GPIO. 


GPIO_USE_SEL2[60:32]— R/W. Each bit in this register enables the corresponding 
GPIO (if it exists) to be used as a GPIO, rather than for the native function. 
0 = Signal used as native function. 
1 = Signal used as a GPIO. 
NOTES: 
: The following bit is always 1 because it is always unMultiplexed: 17. The 
following bits are unMultiplexed in desktop and are also 1: 0, 1, 2, 24 and 26. 
: If GPIO[n] does not exist, then, the (n-32) bit in this register will always read as 
28:0 0 and writes will have no effect. The following bits are always 0: 29, 30 and 31. 


The following bit is also not used in mobile and is always 0: 0. 

After a full reset RSMRST# all multiplexed signals in the resume and core wells 
are configured as their default function. After only a PLTRST#, the GPIOs in the 
core well are configured as their default function. 

When configured to GPIO mode, the muxing logic will present the inactive state 
to native logic that uses the pin as an input. 

Bit 26 is ignored, functionality is configured by bits 9:8 of FLMAPO register. 


This register corresponds to GPIO[60: 32]. Bit 0 corresponds to GPIO32 and bit 28 
corresponds to GPIO60. 
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13.10.10 GP_!O_ SEL2—GPIO Input/ Output Select 2 Register 


[60:32] 

Offset Address: GPIOBASE +34h Attribute: R/W 

Default Value: 1B55FFFOh Size: 32-bit 

Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


i 
31:29 | Always 0. No corresponding GPIO. 


programmed as an input. 
This register corresponds to GPIO[60:32]. Bit 0 corresponds to GPIO32. 





GP_1O_SEL2[60:32] — R/W. 
0 = GPIO signal is programmed as an output. 
28:0 | 1 = Corresponding GPIO signal (if enabled in the GPIO_USE_SEL2 register) is 


13.10.11 GP_LVL2—GPIO Level for Input or Output 2 Register 


[63:32] 
Offset Address: GPIOBASE +38h Attribute: R/W 
Default Value: 1FFEFFF3h (Desktop) Size: 32-bit 
OEFFFFF3h (Mobile) 
Lockable: Yes Power Well: Core for 0:7, 16:23, 


Resume for 8:15, 24:31 


LS 
31:29 | Reserved. Read-only 0 


GP_LVL[60:32] — R/W. 
If GPIO[n] is programmed to be an output (via the corresponding bit in the GP_IO_SEL 
register), then the corresponding GP_LVL[n] bit can be updated by software to drive a 
high or low value on the output pin. 1 = high, 0 = low. 

28:0 If GPIO[n] is programmed as an input, then the corresponding GP_LVL bit reflects the 


state of the input signal (1 = high, 0 = low.) and writes will have no effect. 

When configured in native mode (GPIO_USE_SEL[n] is 0), writes to these bits have no 
effect. The value reported in this register is undefined when programmed as native 
mode. 


This register corresponds to GPIO[60: 32]. Bit 0 corresponds to GPIO32. 





§§ 
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14 


14.1 


Note: 


SATA Controller Registers 
(D31:F2) 


PCI Configuration Registers (SATA- D31:F2) 


Address locations that are not shown should be treated as Reserved. 


All of the SATA registers are in the core well. None of the registers can be locked. 


Table 14-1. SATA Controller PCI Register Address Map (SATA- D31:F2) (Sheet 1 of 2) 


[onser Trmenonic [ Revistername [Beteutt [Tyne | 
00h-O1h | VID | Vendor Identification = [Vendor Identification = 8086h | RO | 


See register 


04h- 05h PCICMD PCI Command 0000h | R/W, RO | RO 
O06h- 07h PCISTS Pci Status Status 02BOh a RO 


cs alanis ae description | FO 
description 
See register saps 
09h Programming Interface -g!s register 
description aes 
description 
See register he 
OAh SCC Sub Class Code description register 
description 


[oan | eceYease cine Code RO 
[aon [Ptr Prrimary master tatengy Timer [00h [RO 
[oe [are [Reaerype HR 


18h-1Bh | SCMD_BAR anna, CominraneBloew Ease 00000001h | R/W, RO 


1Ch-1Fh SCNL_BAR_ | Secondary Control Block Base Address o0o0000001h R/W, RO 
20h- 23h Legacy Bus Master Base Address 00000001h R/W, RO 


24h-27h ABAR / AHCI Base Address / SATA Index Data See register ae 
SIDPBA Pair Base Address description sae 
description 
2Ch-2Dh SVID Subsystem Vendor Identification 0000h R/WO 
2Eh-2Fh ae Identification 0000h R/WO 
INT_PN | Interrupt Pin Bee Cegister 
description 
40h-41h IDE_TIM | Primary IDE Timing Register 0000h | RW 
42h-43h IDE_TIM | Secondary IDE Timing Register 0000h | RW 
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Table 14-1. SATA Controller PCI Register Address Map (SATA-D31:F2) (Sheet 2 of 2) 
[ones [rnemonie [ Ressterniame [peut [Tye 
70h-71h PPI PCI Power Management Capability ID eaten ||. eo 
description 
72h-73h PC PCI Power Management Capabilities sia hegister 
description 
PCI Power Management Control and See register R/W, RO, 
ance sic Mesa9e Signaled Interrupt Capability 7005h FRO | 
82h-83h MSIMC Message Signaled Interrupt Message 0000h RO, R/W 
Control 
gah-87h | SIMA | Bice Sage Signaled Interrupt Message =| ggggqo00h | RO, R/W 


88h-89h MSIMD ee Signaled Interrupt Message 0000h R/W 


smh wn 


B2h-B3h FLRCLV | FLR Capability Length and Version See register | prwo, RO 
description 


RO RW 


NOTE: The |CH9 SATA controller is not arbitrated as a PCI device, therefore it does not need a 
master latency timer. 





14.1.1 VviD—Vendor Identification Register (SATA—D31:F2) 


Offset Address: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16 bit 
Lockable: No Power Well: Core 


einen 





Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h 
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14.1.2 


14.1.3 





DI D—Device | dentification Register (SATA—D31:F2) 


Offset Address: O2h-03h Attribute: RO 
Default Value: See Bit Description Size: 16 bit 
Lockable: No Power Well: Core 


a nso 


Device ID — RO. This is a 16-bit value assigned to the Intel® ICH9 SATA controller. 


NOTE: The value of this field will change dependent upon the value of the MAP 
Register. See Section 14.1.30 





PCI CMD—PCI Command Register (SATA- D31:F2) 


Address Offset: O4h-05h Attribute: RO, R/W 
Default Value: 0000h Size: 16 bits 


[a sete 
15:11 | Reserved 


Interrupt Disable — R/W. This disables pin-based INTx# interrupts. This bit has no 
effect on MSI operation. 


0 = Internal INTx# messages are generated if there is an interrupt and MSI is not 
enabled. 
1 = Internal INTx# messages will not be generated. 


Fast Back to Back Enable (FBE) — RO. Reserved as 0. 
SERR# Enable (SERR_EN) — RO. Reserved as 0. 
Wait Cycle Control (WCC) — RO. Reserved as 0. 


Parity Error Response (PER) — R/W. 


0 = Disabled. SATA controller will not generate PERR# when a data parity error is 
detected. 


1 = Enabled. SATA controller will generate PERR# when a data parity error is detected. 


Postable Memory Write Enable (PMWE) — RO. Reserved as 0. 
Special Cycle Enable (SCE) — RO. Reserved as 0. 


Bus Master Enable (BME) — R/W. This bit controls the ICH9’s ability to act as a PCI 
master for IDE Bus Master transfers. This bit does not impact the generation of 
completions for split transaction commands. 


Memory Space Enable (MSE) — R/W // RO. Controls access to the SATA controller’s 
target memory space (for AHCI). This bit is RO ‘0’ when not in AHCI/RAID modes. 


1/ O Space Enable (1OSE) — R/W. This bit controls access to the I/O space registers. 

0 = Disables access to the Legacy or Native IDE ports (both Primary and Secondary) as 
well as the Bus Master I/O registers. 

1 = Enable. Note that the Base Address register for the Bus Master registers should be 
programmed before this bit is set. 


Sed 
Lea 
VGA Palette Snoop (VPS) — RO. Reserved as 0. 
ae 
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14.1.4 PCISTS — PCI Status Register (SATA- D31:F2) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: O2BOh Size: 16 bits 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


a 


Detected Parity Error (DPE) — R/WC. 


0 = No parity error detected by SATA controller. 
1 = SATA controller detects a parity error on its interface. 


Signaled System Error (SSE) — RO. Reserved as 0. 


Received Master Abort (RMA) — R/WC. 
13 0 = Master abort Not generated. 
1 = SATA controller, as a master, generated a master abort. 


Reserved as 0 — RO. 
Signaled Target Abort (STA) — RO. Reserved as 0. 


DEVSEL# Timing Status (DEV_ STS) — RO. 
01 = Hardwired; Controls the device select time for the SATA controller’s PCI interface. 


Data Parity Error Detected (DPED) — R/WC. For ICH9, this bit can only be set on 

read completions received from the bus when there is a parity error. 

1 = SATA controller, as a master, either detects a parity error or sees the parity error 
line asserted, and the parity error response bit (bit 6 of the command register) is 


Fast Back to Back Capable (FB2BC) — RO. Reserved as 1. 


| 6 User Definable Features (UDF) — RO. Reserved as 0. 


5 66MHz Capable (66MHZ_CAP) — RO. Reserved as 1. 


Capabilities List (CAP_LIST) — RO. This bit indicates the presence of a capabilities 
list. The minimum requirement for the capabilities list must be PC] power management 
for the SATA controller. 


Interrupt Status (INTS) — RO. Reflects the state of INTx# messages, |1RQ14 or 
IRQ15. 
3 0 = Interrupt is cleared (independent of the state of Interrupt Disable bit in the 
command register [offset 04h]). 
1 = Interrupt is to be asserted 
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14.1.5 RI D—Revision I dentification Register (SATA—D31:F2) 


Offset Address: O8h Attribute: RO 


ee 


for the value of the Revision |D Register 





Revision ID — RO. Refer to the Intel® 1/0 Controller Hub (ICH9) Specification Update 


14.1.6 PI —Programming Interface Register (SATA- D31:F2) 


14.1.6.1 When Sub Class Code Register (D31:F2:Offset OAh) = Olh 


Address Offset: O9h Attribute: R/W, RO 
Default Value: See bit description Size: 8 bits 


This read-only bit is a 1 to indicate that the I|CH9 supports bus master operation 
Reserved. Will always return 0. 


Secondary Mode Native Capable (SNC) — RO. 


0 = Secondary controller only supports legacy mode. 
1 = Secondary controller supports both legacy and native modes. 


When MAP.MV (D31:F2: Offset 90: bits 1:0) is any value other than OOb, this bit reports 
as a 0. When MAP.MV is 00b, this bit reports as a 1. 

Secondary Mode Native Enable (SNE) — R/W. 

Determines the mode that the secondary channel is operating in. 


0 = Secondary controller operating in legacy (compatibility) mode 
1 = Secondary controller operating in native PCI mode. 


When MAP.MV (D31:F2: Offset 90:bits 1:0) is any value other than OOb, this bit is read- 


only (RO). When MAP.MV is 00b, this bit is read/write (R/W). 

If this bit is set by software, then the PNE bit (bit 0 of this register) must also be set by 
software. While in theory these bits can be programmed separately, such a 
configuration is not supported by hardware. 


Primary Mode Native Capable (PNC) — RO. 


0 = Primary controller only supports legacy mode. 
1 = Primary controller supports both legacy and native modes. 


When MAP.MV (D31:F2: Offset 90: bits 1:0) is any value other than OOb, this bit reports 
as a 0. When MAP.MV is OOb, this bit reports as a1 

Primary Mode Native Enable (PNE) — R/W. 

Determines the mode that the primary channel is operating in. 

0 = Primary controller operating in legacy (compatibility) mode. 

1 = Primary controller operating in native PCI mode. 

If this bit is set by software, then the SNE bit (bit 2 of this register) must also be set by 
software simultaneously. 
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14.1.6.2 When Sub Class Code Register (D31:F2:Offset OAh) = 04h 


Address Offset: 09h Attribute: RO 
Default Value: 00h Size: 8 bits 


| Bit | Description 





7:0 Interface (IF) — RO. 
; When configured as RAID, this register becomes read only 0. 


14.1.6.3 When Sub Class Code Register (D31:F2:Offset OAh) = 06h 


Address Offset: O9h Attribute: RO 
Default Value: O1h Size: 8 bits 


os 
7:0 Interface (IF) — RO. 
; Indicates the SATA Controller supports AHCI, rev 1.2. 


14.1.7 SCC—Sub Class Code Register (SATA- D31:F2) 


Address Offset: OAh Attribute: RO 
Default Value: See bit description Size: 8 bits 


a 


Sub Class Code (SCC) 
This field specifies the sub-class code of the controller, per the table below: 
Intel® ICH9 Only: 


SCC Register Attribute SCC Register Value 
RO O1h (IDE Controller) 





ICH9M Only: 


MAP.SMS (D31:F2:Offset 
90h:bit 7:6) 


00b O1h (IDE Controller) 
Olb 06h (AHCI Controller) 


SCC Register Value 


Intel® Matrix Storage Technology Enabled |CH9 components Only: 


MAP.SMS (D31:F2:Offset SCC Default Register 
90h: bit 7:6) Value 


00b O1h (IDE Controller) 
O1b 06h (AHCI Controller) 
10b 04h (RAID Controller) 
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14.1.8 


14.1.9 


14.1.10 


14.1.11 


BCC—Base Class Code Register 
(SATA- D31:F2SATA- D31:F2) 


Address Offset: OBh Attribute: RO 
Default Value: Ol1h Size: 8 bits 


Bit | Description 





7:0 Base Class Code (BCC) — RO. 
; 01h = Mass storage device 
PMLT—Primary Master Latency Timer Register 
(SATA- D31:F2) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


a 


Master Latency Timer Count (MLTC) — RO. 


00h = Hardwired. The SATA controller is implemented internally, and is not arbitrated 
as a PCI device, so it does not need a Master Latency Timer. 





HTYPE—Header Type 

(SATA- D31:F2) 

Address Offset: OEh Attribute: RO 
Default Value: 00h Size: 8 bits 


ae 
Multi-function Device (MFD) — RO. 
Indicates this SATA controller is not part of a multifunction device. 
Header Layout (HL) — RO. 
Indicates that the SATA controller uses a target device layout. 


PCMD_BAR—Primary Command Block Base Address 
Register (SATA- D31:F2) 


Address Offset: 10h-13h Attribute: R/W, RO 
Default Value: | Q0000001h Size: 32 bits 


2 ee 
31:16 Reserved 


Base ————— — R/W. This field provides the base address of the I/O space ( 
consecutive I/O locations). 








Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for 1/O 
space. 


NOTE: This 8-byte I/O space is used in native mode for the Primary Controller’s Command Block. 
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14.1.12 


14.1.13 


14.1.14 


548 


PCNL_BAR—Primary Control Block Base Address Register 
(SATA- D31:F2) 


Address Offset: 14h-17h Attribute: R/W, RO 
Default Value: o00000001h Size: 32 bits 


a 


Base Address — R/W. This field provides the base address of the 1/O space (4 


consecutive I/O locations). 


el Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for 1/O 
space. 


NOTE: This 4-byte I/O space is used in native mode for the Primary Controller’s Command Block. 





SCMD_BAR—Secondary Command Block Base Address 
Register (IDE D31:F1) 


Address Offset: 18h-1Bh Attribute: R/W, RO 
Default Value: | 00000001h Size: 32 bits 


a 


15:3 Base Address — R/W. This field provides the base address of the I/O space (8 
, consecutive I/O locations). 


ZA 


ZZ Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for 1/O 
space. 


NOTE: This 4-byte I/O space is used in native mode for the Secondary Controller’s Command 
Block. 





SCNL_BAR—Secondary Control Block Base Address 
Register (IDE D31:F1) 


Address Offset: 1Ch-1Fh Attribute: R/W, RO 
Default Value: 00000001h Size: 32 bits 


Pe cine 


Base Address — R/W. This field provides the base address of the I/O space (4 


consecutive I/O locations). 


ie Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


NOTE: This 4-byte I/O space is used in native mode for the Secondary Controller's Command 
Block. 
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14.1.15 BAR — Legacy Bus Master Base Address Register 


(SATA- D31:F2) 
Address Offset: 20h-23h Attribute: R/W, RO 
Default Value: | Q00000001h Size: 32 bits 


The Bus Master IDE interface function uses Base Address register 5 to request a 16- 
byte |O space to provide a software interface to the Bus Master functions. Only 12 
bytes are actually used (6 bytes for primary, 6 bytes for secondary). Only bits [15:4] 
are used to decode the address. 


2 a ee) 
31:16 | Reserved 


Base Address — R/W. This field provides the base address of the I/O space (16 
consecutive I/O locations). 


Base— R/W / RO. When SCC is O1h, this bit will be R/W resulting in requesting 16B of 
1/O space. When SCC is not O1h, this bit will be Read Only 0, resulting in requesting 
32B of I/O space. 


Reserved 


Resource Type I ndicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


14.1.16 ABAR/ SI DPBA1 — AHCI Base Address Register/ Serial ATA 
Index Data Pair Base Address (SATA- D31:F2) 


When the programming interface is not IDE (i.e. SCC is not O1h), this register is named 
ABAR. When the programming interface is IDE, this register becomes SIDPBA. 





Note that hardware does not clear those BA bits when switching from |DE component 
to non-IDE component or vice versa. BIOS is responsible for clearing those bits to 0 
since the number of writable bits changes after component switching (as indicated by a 
change in SCC). In the case, this register will then have to be re-programmed to a 
proper value. 


14.1.16.1 When SCC is not O1lh 


When the programming interface is not IDE, the register represents a memory BAR 
allocating space for the AHCI memory registers defined in Section 15.3 


Address Offset: 24-27h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


Pe etn 


31:11 | Base Address (BA) — R/W. Base address of register memory space (aligned to 1 KB) 


Prefetchable (PF) — RO. Indicates that this range is not pre-fetchable 


1 Type (TP) — RO. Indicates that this range can be mapped anywhere in 32-bit address 
, space. 
Resource Type Indicator (RTE) — RO. Hardwired to 0 to indicate a request for 
register memory space. 


NOTE: 
di: The ABAR register must be set to a value of 0001_0000h or greater. 
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14.1.17 


14.1.18 


14.1.19 
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SATA Controller Registers (D31:F2) 


When SCC is Ol1h 


When the programming interface is IDE, the register becomes an I/O BAR allocating 16 
bytes of |/O space for the |/O-mapped registers defined in Section 27.2.4. Note that 
although 16 bytes of locations are allocated, only 8 bytes are used to as SINDX and 
SDATA registers; with the remaining 8 bytes preserved for future enhancement. 


Address Offset: 24h-27h Attribute: R/WO 
Default Value: 00000001h Size: 32 bits 


Pe bt 


Base Address (BA) — R/W. Base address of the I/O space. 
| 0 | Resource Type Indicator (RTE) — RO. Indicates a request for I/O space. 


SVI D—Subsystem Vendor Identification Register 
(SATA- D31:F2) 





Address Offset: 2Ch-2Dh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Function Level Reset: No 


| Bit | Description 





15:0 Subsystem Vendor ID (SVID) — R/WO. Value is written by BIOS. No hardware 
' action taken on this value. 


S|D—Subsystem Identification Register (SATA- D31:F2) 


Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Function Level Reset: No 


Description 


15:0 Subsystem ID (SID) — R/WO. Value is written by BIOS. No hardware action taken on 
, this value. 


CAP—Capabilities Pointer Register (SATA- D31:F2) 


Address Offset: 34h Attribute: RO 
Default Value: 80h Size: 8 bits 


a 


Capabilities Pointer (CAP_ PTR) — RO. Indicates that the first capability pointer 





offset is 80h. This value changes to 70h if the Sub Class Code (SCC) (Dev 31:F2:0Ah) is 
configure as IDE mode (value of 01). 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


| | ® 
SATA Controller Registers (D31:F2) [ n tel ) 


14.1.20 INT_LN—Interrupt Line Register (SATA- D31:F2) 


Address Offset: 3Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Lo 


Interrupt Line — R/W. This field is used to communicate to software the interrupt line 
that the interrupt pin is connected to. 





14.1.21 INT_PN—Interrupt Pin Register (SATA- D31:F2) 


Address Offset: 3Dh Attribute: RO 
Default Value: See Register Description Size: 8 bits 


Peat 


Interrupt Pin — RO. This reflects the value of D31IP.SIP (Chipset Config 
Registers: Offset 3100h: bits 11:8). 





14.1.22 IDE_TIM — 1DE Timing Register (SATA- D31:F2) 


Address Offset: Primary: 40h-41h Attribute: R/W 
Secondary: 42h-43h 
Default Value: 0000h Size: 16 bits 


Peete 


IDE Decode Enable (IDE) — R/W. Individually enable/disable the Primary or Secondary decode. 


0= Disable. 
1 = Enables the Intel® ICH9 to decode the associated Command Blocks (1F0-1F7h for primary, 
170-177h for secondary) and Control Block (3F6h for primary and 376h for secondary). 


This bit effects the IDE decode ranges for both legacy and native-Mode decoding. 


NOTE: This bit affects SATA operation in both combined and non-combined ATA modes. See 
Section 5.16 for more on ATA modes of operation. 


14.1.23 PID—PCI Power Management Capability | dentification 
Register (SATA- D31:F2) 


Address Offset: 70h-71h Attribute: RO 
Default Value: XXO01h Size: 16 bits 


Cr ee 


Next Capability (NEXT) — RO. 





BOh — if SCC = O1h (IDE mode) indicating next item is FLR capability pointer. 
A8h — for all other values of SCC to point to the next capability structure. 


Capability ID (CID) — RO. Indicates that this pointer is a PCI power management. 
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14.1.24 PC—PCI Power Management Capabilities Register 


(SATA- D31:F2) 
Address Offset: 72h-73h Attribute: RO 
Default Value: x003h Size: 16 bits 


Lo 


PME Support (PME_SUP) — RO. 
00000 = If SCC = O1h, indicates no PME support in IDE mode. 


01000 = If SCC is not O1h, in a non-IDE mode, indicates PME# can be generated from 
the D3yo7 state in the SATA host controller. 


D2 Support (D2_SUP) — RO. Hardwired to 0. The D2 state is not supported 
D1 Support (D1_SUP) — RO. Hardwired to 0. The D1 state is not supported 


Auxiliary Current (AUX_CUR) — RO. PME# from D3¢o 1p state is not supported, 


therefore this field is OOOb. 


Device Specific | nitialization (DSI) — RO. Hardwired to 0 to indicate that no device- 
specific initialization is required. 


Reserved 


PME Clock (PME_CLK) — RO. Hardwired to 0 to indicate that PCI clock is not required to 
generate PME#. 


Version (VER) — RO. Hardwired to 011 to indicates support for Revision 1.2 of the PCI 
Power Management Specification. 





14.1.25 PMCS—PCI Power Management Control and Status 
Register (SATA- D31:F2) 


Address Offset: 74h-75h Attribute: R/W, R/WC 
Default Value: xx08h Size: 16 bits 
Function Level Reset: No (Bits 8 and 15) 


os 


PME Status (PMES) — R/WC. Bit is set when a PME event is to be requested, and if 
this bit and PMEE is set, a PME# will be generated from the SATA controller 

Note: Whenever SCC = O1h, hardware will automatically change the attribute of this bit 
to RO ‘0’. Software is advised to clear PMEE and PMES together prior to changing SCC 
thru MAP.SMS. 


This bit is not reset by Function Level Reset. 


PME Enable (PMEE) — R/W. When set, the SATA controller generates PME# form 
D3yoT ON a wake event. 

Note: Whenever SCCSCC = O1h, hardware will automatically change the attribute of 
this bit to RO ‘0’. Software is advised to clear PMEE and PMES together prior to changing 
SCC thru MAP.SMS. 


This bit is not reset by Function Level Reset. 
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14.1.26 


Note: 


ee 


No Soft Reset (NSFRST) — RO. These bits are used to indicate whether devices 
transitioning from D3yo7 state to DO state will perform an internal reset. 


0 = Device transitioning from D3yo7 state to DO state perform an internal reset. 
1 = Device transitioning from D3yo7 state to DO state do not perform an internal reset. 


Configuration content is preserved. Upon transition from the D3yo7 state to DO state 
initialized state, no additional operating system intervention is required to preserve 
configuration context beyond writing to the PowerState bits. 

Regardless of this bit, the controller transition from D307 state to DO state by a system 
or bus segment reset will return to the state DO uninitialized with only PME context 
preserved if PME is supported and enabled. 


Reserved 


Power State (PS) — R/W. These bits are used both to determine the current power 
state of the 

SATA controller and to set a new power state. 

00 = DO state 

11 = D3yHot state 

When in the D3,,9, state, the controller’s configuration space is available, but the I/O 
and memory spaces are not. Additionally, interrupts are blocked. 





MSI CI —Message Signaled I nterrupt Capability 
Identification (SATA- D31:F2) 


Address Offset: 80h-81h Attribute: RO 
Default Value: 7005h Size: 16 bits 


There is no support for MSI when the software is operating in legacy (IDE) mode when 
AHCI is not enabled. Prior to switching from AHCI to IDE mode, software must make 
sure that MSI is disabled. 


a 


15:8 Next Pointer (NEXT) — RO. Indicates the next item in the list is the PCl power 
, management pointer. 


Capability 1D (CID) — RO. Capabilities 1D indicates MSI. 
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14.1.27 MSIMC—Message Signaled I nterrupt Message Control 


(SATA- D31:F2) 
Address Offset: 82h-83h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 
Note: There is no support for MSI when the software is operating in legacy (IDE) mode when 


AHCI is not enabled. Prior to switching from AHCI to IDE mode, software must make 
sure that MSI is disabled. 


| Bits | Description 
Reserved 


64 Bit Address Capable (C64) — RO. Capable of generating a 32-bit message only. 


Multiple Message Enable (MME) — R/W. 
= 000 (and MSIE is set), a single MSI message will be generated for all SATA ports, and 
bits [15:0] of the message vector will be driven from MD[15: 0]. 
For 6 port components: 
Value Driven on 
MSI Memory Write 


000, . 


MD[15:3] 


For 4 port components: 


Value Driven on 
MSI Memory Write 


000, | 


Port 0: 0 
Port 1: 0 
Port 2: 0 
Port 3: 0 


100 MD[15:3] 


Values ‘011b’ to ‘111b’ are reserved. If this field is set to one of these reserved values, 

the results are undefined. 

NOTE: Note: The CCC interrupt is generated on unimplemented port (AHCI PI register 
bit equal to 0). If CCC interrupt is disabled, no MSI shall be generated for the 
port dedicated to the CCC interrupt. When CCC interrupt occurs, MD[2:0] is 
dependant on CCC_CTL.INT (in addition to MME). 
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14.1.28 


Note: 


14.1.29 


Note: 


Multiple Message Capable (MMC) — RO. Indicates the number of interrupt messages 
supported by the ICH9 SATA controller. 


000 =1 MSI Capable (When SCC bit is set to 01h. MSI is not supported in IDE mode) 
100 = 8 MSI Capable 


MSI Enable (MSIE) — R/W /RO. If set, MSI is enabled and traditional interrupt pins 
are not used to generate interrupts. This bit is RW when SC.SCC is not 01h and is read- 
only 0 when SCC is O1h. Note that CMD.ID bit has no effect on MSI. 


NOTE: Software must clear this bit to ‘0’ to disable MSI first before changing the 
number of messages allocated in the MMC field. Software must also make sure 
this bit is cleared to ‘0’ when operating in legacy mode (when GHC.AE = 0). 





MSI MA— Message Signaled I nterrupt Message Address 
(SATA- D31:F2) 


Address Offset: 84h-87h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


There is no support for MSI when the software is operating in legacy (IDE) mode when 
AHCI is not enabled. Prior to switching from AHCI to IDE mode, software must make 
sure that MSI is disabled. 


| Bits | Description 


31:2 Address (ADDR) — R/W. Lower 32 bits of the system specified message address, 
’ always DWORD aligned. 


Reserved 


MSI MD—Message Signaled I nterrupt Message Data 
(SATA- D31:F2) 


Address Offset: 88h-89h Attribute: R/W 
Default Value: 0000h Size: 16 bits 





There is no support for MSI when the software is operating in legacy (IDE) mode when 
AHCI is not enabled. Prior to switching from AHCI to IDE mode, software must make 
sure that MSI is disabled. 


Lo 


Data (DATA) — R/W. This 16-bit field is programmed by system software if MSI is 
enabled. Its content is driven onto the lower word of the data bus of the MSI memory 


write transaction. Note that when the MME field is set to ‘001’ or ‘010’, bit [0] and bits 
[1:0] respectively of the MSI memory write transaction will be driven based on the 
source of the interrupt rather than from MD[2:0]. See the description of the MME field. 
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14.1.30 MAP—Address Map Register (SATA- D31:F2) 


Address Offset: 90h Attribute: R/W, R/WO 
Default Value: 0000h Size: 16 bits 
Function Level Reset: No (Bits 7:5 and 13:8 only) 


Pe sino 


SATA Mode Select (SMS) — R/W. SW programs these bits to control the mode in 
which the SATA Controller should operate: 
00b = IDE mode 
01b = AHCI mode 
10b = RAID mode 
11b = Reserved 
NOTES: 
7:6 : The SATA Function Device ID will change based on the value of this register. 
2. When switching from AHCI or RAID mode to IDE mode, a 2 port SATA controller 
(Device 31, Function 5) will be enabled. 
F AHCI mode may only be selected when MV = 00 
. RAID mode may only be selected when MV = 00 
: Programming these bits with values that are invalid (e.g. selecting RAID when in 
combined mode) will result in indeterministic behavior by the HW 
: SW shall not manipulate SMS during runtime operation; i.e. the OS will not do 
this. The BIOS may choose to switch from one mode to another during POST. 


These bits are not reset by Function Level Reset. 


SATA Port-to-Controller Configuration (SC) — R/W. This bit changes the number of 

SATA ports available within each SATA Controller. 

0 = Up to 4 SATA ports are available for Controller 1 (Device 31 Function 2) with ports 
[3:0] and up to 2 SATA ports are available for Controller 2 (Device 31 Function 5) 
with ports [5:4]. 

1 = Up to 6 SATA ports are available for Controller 1 (Device 31 Function 2) with ports 
[5:0] and no SATA ports are available for Controller 2 (Device 31 Function 5). 


NOTE: This bit should be set to 1 only in AHCI mode. This bit is not reset by Function 
Level Reset. 


Map Value (MV) — RO. Reserved 


14.1.31 PCS—Port Control and Status Register (SATA- D31:F2) 
Address Offset: 92h-93h Attribute: R/W, RO 


Default Value: 0000h Size: 16 bits 
Function Level Reset: No 





By default, the SATA ports are set to the disabled state (bits [5:0] = ‘0’). When enabled 
by software, the ports can transition between the on, partial, and slumber states and 
can detect devices. When disabled, the port is in the “off” state and cannot detect any 
devices. 


If an AHCl-aware or RAID enabled operating system is being booted, then system BIOS 
shall insure that all supported SATA ports are enabled prior to passing control to the 

OS. Once the AHCI aware OS is booted it becomes the enabling/disabling policy owner 
for the individual SATA ports. This is accomplished by manipulating a port’s PxSCTL and 
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PxCMD fields. Because an AHCI or RAID aware OS will typically not have knowledge of 
the PxE bits and because the PxE bits act as master on/off switches for the ports, pre- 
boot software must insure that these bits are set to ‘1’ prior to booting the OS, 
regardless as to whether or not a device is currently on the port. 


OOB Retry Mode (ORM) — RW. 

0 = The SATA controller will not retry after an OOB failure 

1 = The SATA controller will continue to retry after an OOB failure until successful 
(infinite retry) 


Reserved. 


Port 5 Present (P5P) — RO. The status of this bit may change at any time. This bit 
is cleared when the port is disabled via P5E. This bit is not cleared upon surprise 
removal of a device. 

0 = No device detected. 

1 = The presence of a device on Port 5 has been detected. 


Port 4 Present (P4P) — RO. The status of this bit may change at any time. This bit 
is cleared when the port is disabled via P4E. This bit is not cleared upon surprise 
removal of a device. 

0 = No device detected. 

1 = The presence of a device on Port 4 has been detected. 


Port 3 Present (P3P) — RO. The status of this bit may change at any time. This bit 
is cleared when the port is disabled via P3E. This bit is not cleared upon surprise 
(Desktop | removal of a device. 
Only) |0 = No device detected. 
1 = The presence of a device on Port 3 has been detected. 


Port 2 Present (P2P) — RO. The status of this bit may change at any time. This bit 
10 is cleared when the port is disabled via P2E. This bit is not cleared upon surprise 


(Desktop | removal of a device. 


Only) |0 = No device detected. 
1 = The presence of a device on Port 2 has been detected. 


11:10 
(Mobile | Reserved. 


Port 1 Present (P1P) — RO. The status of this bit may change at any time. This bit 
is cleared when the port is disabled via P1E. This bit is not cleared upon surprise 
removal of a device. 

0 = No device detected. 

1 = The presence of a device on Port 1 has been detected. 


Port 0 Present (POP) — RO. The status of this bit may change at any time. This bit 
is cleared when the port is disabled via POE. This bit is not cleared upon surprise 
removal of a device. 


0 = No device detected. 
1 = The presence of a device on Port 0 has been detected. 


Port 5 Enabled (P5E) — R/W. 
0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
5 1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
NOTE: This bit takes precedence over PSCMD.SUD (offset ABAR+298h: bit 1) 


If MAP.SC is ‘0’, if SCC is ‘OLh’ this bit will be read only ‘0’ or if MAP.SPD[5] is ‘1’. 
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3 
(Desktop 
Only) 


2 
(Desktop 


Only) 


Port 4 Enabled (P4E) — R/W. 


0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 

1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 

NOTE: This bit takes precedence over P4CMD.SUD (offset ABAR+298h: bit 1) 


If MAP.SC is ‘0’, if SCC is ‘O1h’ this bit will be read only ‘0’ or if MAP.SPD[4] is ‘1’. 


Port 3 Enabled (P3E) — R/W. 
0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
NOTE: This bit takes precedence over P3CMD.SUD (offset ABAR+298h: bit 1). When 
MAP.SPD[3] is ‘1’ this is reserved and is read-only 0. 


Port 2 Enabled (P2E) — R/W. 


0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
NOTE: This bit takes precedence over P2CMD.SUD (offset ABAR+218h: bit 1). When 
MAP.SPD[2] is ‘1’ this is reserved and is read-only 0. 


Reserved 


Port 1 Enabled (P1E) — R/W. 


0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
NOTE: This bit takes precedence over PLCMD.SUD (offset ABAR+198h: bit 1). When 
MAP.SPD[1] is ‘1’ this is reserved and is read-only 0. 


Port 0 Enabled (POE) — R/W. 


0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
NOTE: This bit takes precedence over POCMD.SUD (offset ABAR+118h: bit 1). When 
MAP.SPD[0] is ‘1’ this is reserved and is read-only 0. 
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14.1.32 SCLKCG - SATA Clock Gating Control Register 


Address Offset: 94h-97h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Reserved. 


SATA Clock Request Enabled (SCRE) — RW 

0 = SATA Clock Request Protocol is disabled. SATACLKREQ# pin, when in native 
function, will always output ‘0’ to keep the SATA clock running. 

1 = SATA Clock Request Protocol is enabled. SATACLKREQ# pin, when in native 
function, will behave as the SATA clock request to the system clock chip. 


Port Clock Disable (PCD) — 


0 = All clocks to the associated port logic will operate normally. 
1 = The backbone clock driven to the associated port logic is gated and will not 
toggle. 


Bit 29: Port 5 
Bit 28: Port 4 
Bit 27: Port 3 
BIt 26: Port 2 
Bit 25: Port 1 
Bit 24: Port 0 


If a port is not available, software shall set the corresponding bit to 1. Software can 
also set the corresponding bits to 1 on ports that are disabled. 


SCLKCG Field 1 — R/W. BIOS must program these bits to 193h. 
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14.1.33 SCLKGC - SATA Clock General Configuration Register 


Address Offset: 9Ch-9Fh Attribute: R/W, R/WO 
Default Value: 00000000h Size: 32 bits 
Function Level Reset: No 


a 


7 (ICH9 
Alternate ID Enable (AIE) — R/WO. 


0 = When in RAID mode the SATA Controller located at Device 31: Function 2 will 
report the following Device 1D 2822h for Desktop or 282Ah for Mobile and the 
Microsoft Windows Vista* in-box version of the Intel® Matrix Storage Manager 
7 will load on the platform. 
(ICHOR, | 1 = When in RAID mode the SATA Controller located at Device 31: Function 2 will 
ICH9DH, report the following Device ID 2925h for Desktop or 292Ch for Mobile to 
ICH9DO, prevent the Microsoft Windows Vista* in-box version of the Intel® Matrix 
and Storage Manager from loading on the platform and will require the user to 
ICH9M-E perform an ‘F6’ installation of the appropriate Intel Matrix Storage Manager. 
Only) NOTE: This field is applicable when the AHCI is configured for RAID mode of 
operation. It has no impact for AHCI and IDE modes of operation. BIOS is 
recommended to program this bit prior to programming the MAP.SMS field 
to reflect RAID. This field is reset by PLTRST#. BIOS is required to 
reprogram the value of this bit after resuming from S3, S4 and S5. 


SATA2-port Configuration I ndicator (SATA2PIND) — RO. 


0 = Normal configuration. 
1 = One IDE Controller is implemented supporting only two ports for a Primary 
Master and a Secondary Master. 
NOTE: When set, BIOS must ensure that bit 2 and bit 3 of the AHCI PI registers 
are zeros. BIOS must also make sure that Port 2 and Port 3 are disabled 
(via PCS configuration register) and the port clocks are gated (via SCLKCG 
configuration register). 


SATA4-port All Master Configuration Indicator (SATA4PMIND) — RO. 
0 = Normal configuration. 


1 = Two IDE Controllers are implemented, each supporting two ports for a Primary 
Master and a Secondary Master. 


NOTE: When set, BIOS must ensure that bit 2 and bit 3 of the AHCI Pl registers 
are zeros. BIOS must also make sure that Port 2 and Port 3 are disabled 
(via PCS configuration register) and the port clocks are gated (via SCLKCG 
configuration register). 
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14.1.33.1 SATACRO—SATA Capability Register 0 (SATA- D31:F2) 
Address Offset: A8h-ABh Attribute: RO, R/WO 


Default Value: 0010B012h Size: 32 bits 
Function Level Reset: No (Bits 15:8 only) 


Note: This register shall be read-only 0 when SCC is O1Lh. 


2 ee 
31:24 | Reserved 


23:20 Major Revision (MAJ REV) — RO: Major revision number of the SATA Capability 
, Pointer implemented. 


Pointer implemented. 


19:16 Minor Revision (MINREV) — RO: Minor revision number of the SATA Capability 


Next Capability Pointer (NEXT) — R/WO: Points to the next capability structure. 


15: 
These bits are not reset by Function Level Reset. 
7:0 Capability | D (CAP)— RO: This value of 12h has been assigned by the PCI SIG to 
: designate the SATA Capability Structure. 





14.1.33.2 SATACR1—SATA Capability Register 1 (SATA- D31:F2) 


Address Offset: ACh-AFh Attribute: RO 
Default Value: 00000048h Size: 32 bits 
Note: This register shall be read-only 0 when SCC is O1h. 


Eo rr an 


BAR Offset (BAROFST) — RO: Indicates the offset into the BAR where the Index/Data 
pair are located (in Dword granularity). The Index and Data I/O registers are located at 
offset 10h within the I/O space defined by LBAR. A value of 004h indicates offset 10h. 


000h = Oh offset 
OO1h = 4h offset 
002h = 8h offset 
003h = Bh offset 
004h = 10h offset 


FFFh = 3FFFh offset (max 16KB) 


BAR Location (BARLOC) — RO: Indicates the absolute PCI Configuration Register 
3:0 


address of the BAR containing the Index/Data pair (in Dword granularity). The Index 
and Data I/O registers reside within the space defined by LBAR in the SATA controller. A 
value of 8h indicates offset 20h, which is LBAR. 


0000 - 0011b = reserved 

0100b = 10h => BARO 

0101b = 14h => BARI 

0110b = 18h => BAR2 

0111b = 1Ch => BAR3 

1000b = 20h => LBAR 

1001b = 24h => BARS5 

1010 - 1110b = reserved 

1111b = Index/Data pair in PCI Configuration space. This isn’t supported in |CH9. 
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FLRCI D—FLR Capability 1D (SATA- D31:F2) 


Address Offset: BO-Blh Attribute: RO 
Default Value: 0009h Size: 16 bits 


a 


Next Capability Pointer — RO. 00h indicates the final item in the capability list. 


Capability ID — RO. The value of this field depends on the FLRCSSEL bit. 
13h = If PFLRCSSEL = 0 
09h (Vendor Specific) = If PFLRCSSEL = 1 





FLRCLV—FLR Capability Length and Version (SATA- 
D31:F2) 


Address Offset: B2-B3h Attribute: RO, R/WO 
Default Value: xx06h Size: 16 bits 
Function Level Reset: No (Bit 9:8 Only when FLRCSSEL = ‘0’) 


When FLRCSSEL = ‘0’, this register is defined as follows: 


a 


FLR Capability — R/WO. 
1 = Support for Function Level reset. 
This bit is not reset by the Function Level Reset. 


TXP Capability — R/WO. 
1 = Support for Transactions Pending (TXP) bit. TXP must be supported if FLR is 
supported. 


Vendor-Specific Capability |D — RO. This field indicates the # of bytes of this 
Vendor Specific capability as required by the PCI specification. It has the value of 06h 
for the FLR capability. 


Vendor-Specific Capability |D — RO. A value of 2h identifies this capability as the 
Function Level Reset (FLR). 


Vendor-Specific Capability |D — RO. This field indicates the # of bytes of this 
Vendor Specific capability as required by the PCI specification. It has the value of 06h 
for the FLR capability. 
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14.1.36 FLRC—FLR Control (SATA- D31:F2) 


Address Offset: B4-B5h Attribute: RO, R/W 
Default Value: 0000h Size: 16 bits 


15:9 | Reserved. 


Transactions Pending (TXP) — RO. 
0 = Controller has received all non-posted requests. 


1 = Controller has issued non-posted requests which has not been completed. 
Reserved. 


Initiate FLR — R/W. Used to initiate FLR transition. A write of ‘1’ indicates FLR 
transition. Since hardware must no t respond to any cycles till FLR completion the value 
read by software from this bit is ‘0’. 





14.1.37 ATC—APM Trapping Control Register (SATA- D31:F2) 


Address Offset: COh Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Secondary Slave Trap (SST) — R/W. Enables trapping and SMI# assertion on legacy 
1/O accesses to 170h-177h and 376h. The active device on the secondary interface 
must be device 1 for the trap and/or SMI# to occur. 


Secondary Master Trap (SPT) — R/W. Enables trapping and SMI # assertion on 
legacy I/O accesses to 170h-177h and 376h. The active device on the secondary 
interface must be device 0 for the trap and/or SMI# to occur. 


Primary Slave Trap (PST) — R/W. Enables trapping and SMI# assertion on legacy I/ 
O accesses to 1FOh-1F7h and 3F6h. The active device on the primary interface must be 
device 1 for the trap and/or SMI# to occur. 


Primary Master Trap (PMT) — R/W. Enables trapping and SMI# assertion on legacy 
1/O accesses to 1FOh-1F7h and 3F6h. The active device on the primary interface must 
be device 0 for the trap and/or SMI# to occur. 
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14.1.38 ATS—APM Trapping Status Register (SATA- D31:F2) 


Address Offset: C4h Attribute: R/WC 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


oe 


| 74 [Reserved 


et EE Slave Trap (SST) — R/WC. Indicates that a trap occurred to the 
secondary slave device. 


Secondary Master Trap (SPT) — R/WC. Indicates that a trap occurred to the 


secondary master device. 


Primary Slave Trap (PST) — R/WC. Indicates that a trap occurred to the primary 


slave device. 


Primary Master Trap (PMT) — R/WC. Indicates that a trap occurred to the primary 
master device. 


14.1.39 SP Scratch Pad Register (SATA- D31:F2) 


Address Offset: DOh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 





Data (DT) — R/W. This is a read/write register that is available for software to use. No 
hardware action is taken on this register. 
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14.1.40 BFCS—BIST FIS Control/ Status Register (SATA- D31:F2) 


Address Offset: EQh-E3h Attribute: R/W, R/WC 
Default Value: 00000000h Size: 32 bits 


es 
31:16 Reserved 


Port 5 BIST FIS Initiate (P5BFI) — R/W. When a rising edge is detected on this bit 
field, the ICH9 initiates a BIST FIS to the device on Port 5, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port 5 is present and ready (not partial/slumber 
state). After a BIST FIS is successfully completed, software must disable and re- 


iS enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FISs or to return the ICH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the P5BFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 
eventually completes successfully 
Port 4 BIST FIS Initiate (P4BFI) — R/W. When arising edge is detected on this bit 
field, the ICH9 initiates a BIST FIS to the device on Port 4, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port 4 is present and ready (not partial/slumber 

14 state). After a BIST FIS is successfully completed, software must disable and re- 
enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FISs or to return the ICH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the P4BFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 
eventually completes successfully 


Port 3 BIST FIS Initiate (P3BFI) — R/W. When arising edge is detected on this bit 
field, the ICH9 initiates a BIST FIS to the device on Port 3, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port 3 is present and ready (not partial/slumber 
state). After a BIST FIS is successfully completed, software must disable and re- 
enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FISs or to return the |CH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the P3BFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 
eventually completes successfully 


Port 2 BIST FIS Initiate (P2BFI) — R/W. When a rising edge is detected on this bit 
field, the ICH9 initiates a BIST FIS to the device on Port 2, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port 2 is present and ready (not partial/slumber 
state). After a BIST FIS is successfully completed, software must disable and re- 
enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FlSes or to return the |CH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the P2BFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 
eventually completes successfully 


13 
(Desktop 
Only) 


12 
(Desktop 
Only) 


13:12 
(Mobile | Reserved 
Only) 
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BIST FIS Successful (BFS) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = This bit is set any time a BIST FIS transmitted by ICH9 receives an R_OK 
completion status from the device. 


NOTE: This bit must be cleared by software prior to initiating a BIST FIS. 


BIST FIS Failed (BFF) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = This bit is set any time a BIST FIS transmitted by ICH9 receives an R_ERR 
completion status from the device. 


NOTE: This bit must be cleared by software prior to initiating a BIST FIS. 


Port 1 BIST FIS Initiate (P1BFI) — R/W. When a rising edge is detected on this bit 
field, the |CH9 initiates a BIST FIS to the device on Port 1, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port 1 is present and ready (not partial/slumber 
state). After a BIST FIS is successfully completed, software must disable and re- 
enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FlSes or to return the |CH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the P1BFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 


eventually completes successfully 


Port 0 BIST FIS Initiate (POBFI) — R/W. When a rising edge is detected on this bit 
field, the ICH9 initiates a BIST FIS to the device on Port 0, using the parameters 
specified in this register and the data specified in BFTD1 and BFTD2. The BIST FIS 
will only be initiated if a device on Port O is present and ready (not partial/slumber 
state). After a BIST FIS is successfully completed, software must disable and re- 
enable the port using the PxE bits at offset 92h prior to attempting additional BIST 
FlSes or to return the |CH9 to a normal operational mode. If the BIST FIS fails to 
complete, as indicated by the BFF bit in the register, then software can clear then set 
the POBFI bit to initiate another BIST FIS. This can be retried until the BIST FIS 
eventually completes successfully 


BIST FIS Parameters (BFP) — R/W. These 6 bits form the contents of the upper 6 
bits of the BIST FIS Pattern Definition in any BIST FIS transmitted by the ICH9. This 
field is not port specific — its contents will be used for any BIST FIS initiated on port 
0, port 1, port 2 or port 3. The specific bit definitions are: 


Bit 7: T - Far End Transmit mode 

Bit 6: A - Align Bypass mode 

Bit 5: S - Bypass Scrambling 

Bit 4: L- Far End Retimed Loopback 

Bit 3: F - Far End Analog Loopback 

Bit 2: P - Primitive bit for use with Transmit mode 
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14.1.41 


14.1.42 


BFTD1—BIST FIS Transmit Datal Register (SATA- D31:F2) 


Address Offset: E4h-E7h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Ss 


BIST FIS Transmit Data 1 — R/W. The data programmed into this register will form 
the contents of the second dword of any BIST FIS initiated by the |CH9. This register is 
not port specific — its contents will be used for BIST FIS initiated on any port. Although 


the 2nd and 3rd DWs of the BIST FIS are only meaningful when the “T” bit of the BIST 
FIS is set to indicate “Far-End Transmit mode”, this register’s contents will be 
transmitted as the BIST FIS 2nd DW regardless of whether or not the “T” bit is indicated 
in the BFCS register (D31:F2:E0h). 





BFTD2—BIST FIS Transmit Data2 Register (SATA- D31:F2) 


Address Offset: E8h-EBh Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


7 rr 


BIST FIS Transmit Data 2 — R/W. The data programmed into this register will form 
the contents of the third dword of any BIST FIS initiated by the ICH9. This register is not 
port specific — its contents will be used for BIST FIS initiated on any port. Although the 


2nd and 3rd DWs of the BIST FIS are only meaningful when the “T” bit of the BIST FIS 
is set to indicate “Far-End Transmit mode”, this register’s contents will be transmitted as 
the BIST FIS 3rd DW regardless of whether or not the “T” bit is indicated in the BFCS 
register (D31:F2:EOh). 
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14.2 Bus Master IDE I/ O Registers (D31:F2) 


The bus master IDE function uses 16 bytes of I/O space, allocated via the BAR register, 
located in Device 31: Function 2 Configuration space, offset 20h. All bus master IDE I/O 
space registers can be accessed as byte, word, or dword quantities. Reading reserved 
bits returns an indeterminate, inconsistent value, and writes to reserved bits have no 
affect (but should not be attempted). These registers are only used for legacy 
operation. Software must not use these registers when running AHCI. All |1/O registers 
are reset by Function Level Reset. The description of the I/O registers is shown in 
Table 14-2. 


Table 14-2. Bus Master IDE I/O Register Address Map 


BAR+ Fi 


BMICP Command Register Primary 00h R/W 
a a 


; : R/W, R/ 
BMISP Bus Master IDE Status Register Primary 00h WC, RO 


a 


04-07 BMIDP ein IDE Descriptor Table Pointer R/W 


BMICS Command Register Secondary 00h R/W 
[reseed 


OAh BMISS Bus Master IDE Status Register Secondary 00h ve - 


OCh- BMIDS Bus Master IDE Descriptor Table Pointer ON R/W 
OFh Secondary 


10h AHCI Index Register 00000000h | R/W, RO 
14h AIDR _ | AHCI Index Data Register R/W 
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14.2.1 BMIC[P,S]—Bus Master IDE Command Register (D31:F2) 


Address Offset: Primary: BAR + 00h Attribute: R/W 
Secondary: BAR + 08h 
Default Value: OOh Size: 8 bits 


pees 

Reserved. Returns 0. 
Read / Write Control (R/ WC) — R/W. This bit sets the direction of the bus master 

3 transfer: This bit must NOT be changed when the bus master function is active. 
0 = Memory reads 
1 = Memory writes 
2:1 Reserved. Returns 0. 

Start/ Stop Bus Master (START) — R/W. 


0 = All state information is lost when this bit is cleared. Master mode operation cannot 
be stopped and then resumed. If this bit is reset while bus master operation is still 
active (i.e., the Bus Master IDE Active bit (D31:F2:BAR + 02h, bit 0) of the Bus 
Master IDE Status register for that IDE channel is set) and the drive has not yet 
finished its data transfer (the Interrupt bit in the Bus Master IDE Status register for 


that IDE channel is not set), the bus master command is said to be aborted and 
data transferred from the drive may be discarded instead of being written to 
system memory. 

Enables bus master operation of the controller. Bus master operation does not 
actually start unless the Bus Master Enable bit (D31:F1:04h, bit 2) in PCI 
configuration space is also set. Bus master operation begins when this bit is 
detected changing from 0 to 1. The controller will transfer data between the IDE 
device and memory only when this bit is set. Master operation can be halted by 
writing a 0 to this bit. 


NOTE: This bit is intended to be cleared by software after the data transfer is 
completed, as indicated by either the Bus Master IDE Active bit being cleared or 
the Interrupt bit of the Bus Master IDE Status register for that IDE channel 
being set, or both. Hardware does not clear this bit automatically. If this bit is 
cleared to O prior to the DMA data transfer being initiated by the drive ina 
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14.2.2 BMIS[P,S]—Bus Master IDE Status Register (D31:F2) 


Address Offset: Primary: BAR + 02h Attribute: R/W, R/WC, RO 
Secondary: BAR + OAh 
Default Value: OOh Size: 8 bits 


a 


PRD Interrupt Status (PRDIS) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = This bit is set when the host controller execution of a PRD that has its PRD_INT bit 


Drive 1 DMA Capable — R/W. 

0 = Not Capable. 

1 = Capable. Set by device dependent code (BIOS or device driver) to indicate that 
drive 1 for this channel is capable of DMA transfers, and that the controller has 
been initialized for optimum performance. The Intel® ICH9 does not use this bit. It 
is intended for systems that do not attach BMIDE to the PCI bus. 


Drive 0 DMA Capable — R/W. 

0 = Not Capable 

1 = Capable. Set by device dependent code (BIOS or device driver) to indicate that 
drive O for this channel is capable of DMA transfers, and that the controller has 
been initialized for optimum performance. The |CH9 does not use this bit. It is 
intended for systems that do not attach BMIDE to the PCI bus. 


0 = Software clears this bit by writing a 1 to it. 

1 = Set when a device FIS is received with the ‘I’ bit set, provided that software has not 
disabled interrupts via the IEN bit of the Device Control Register (see chapter 5 of 
the Serial ATA Specification, Revision 1.0a). 


Error — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = This bit is set when the controller encounters a target abort or master abort when 
transferring data on PCI. 


Bus Master I DE Active (ACT) — RO. 


0 = This bit is cleared by the ICH9 when the last transfer for a region is performed, 
where EOT for that region is set in the region descriptor. It is also cleared by the 
ICH9 when the Start Bus Master bit (D31:F2:BAR+ 00h, bit 0) is cleared in the 
Command register. When this bit is read as a 0, all data transferred from the drive 
during the previous bus master command is visible in system memory, unless the 
bus master command was aborted. 

1 = Set by the ICH9 when the Start bit is written to the Command register. 
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14.2.3 BMI D[P,S]—Bus Master I DE Descriptor Table Pointer 
Register (D31:F2) 


Address Offset: Primary: BAR + 04h-07h_ Attribute: R/W 
Secondary: BAR + OCh-OFh 
Default Value: All bits undefined Size: 32 bits 


Peet 


Address of Descriptor Table (ADDR) — R/W. The bits in this field correspond to bits 
[31:2] of the memory location of the Physical Region Descriptor (PRD). The Descriptor 


at? Table must be Dword-aligned. The Descriptor Table must not cross a 64-K boundary in 


memory. 
Reserved 
14.2.4 Al R—AHCI Index Register (D31:F2) 


Address Offset: Primary: BAR + 10h Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 





This register is available only when SCC is not O1h. 


Pe sno 


Index (INDEX) — R/W: This Index register is used to select the Dword offset of the 
10:2 | Memory Mapped AHCI register to be accessed. A Dword, Word or Byte access is 
specified by the active byte enables of the |1/O access to the Data register. 


14.2.5 Al DR—AHCI Index Data Register (D31:F2) 


Address Offset: Primary: BAR + 14h Attribute: R/W 
Default Value: All bits undefined Size: 32 bits 





This register is available only when SCC is not OLh. 


a 


Data (DATA) — R/W: This Data register is a “window” through which data is read or 
written to the AHCI memory mapped registers. A read or write to this Data register 

triggers a corresponding read or write to the memory mapped register pointed to by 
the Index register. The Index register must be setup prior to the read or write to this 


Data register. 

Note that a physical register is not actually implemented as the data is actually stored 
in the memory mapped registers. 

Since this is not a physical register, the “default” value is the same as the default value 
of the register pointed to by Index. 
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Serial ATA Index/ Data Pair Superset Registers 


All of these I/O registers are in the core well. They are exposed only when SCC is O1h 
(i.e., IDE programming interface). 


These are Index/Data Pair registers that are used to access the SerialATA superset 
registers (SerialATA Status, Serial[ATA Control and SerialATA Error). The |/O space for 
these registers is allocated through SIDPBA. Locations with offset from O8h to OFh are 
reserved for future expansion. Software-write operations to the reserved locations will 
have no effect while software-read operations to the reserved locations will return 0. 


[reer [remone] Reamer 
O0Oh-03h SINDEX Serial ATA Index 


04h-07h SDATA Serial ATA Data 


SINDX - Serial ATA Index (D31:F2) 


Address Offset: SIDPBA + 00h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


Port Index (PIDX) - R/W: This Index field is used to specify the port of the SATA 
controller at which the port-specific SSTS, SCTL, and SERR registers are located. 


00h = Primary Master (Port 0) 
01h = Primary Slave (Port 2) 
02h = Secondary Master (Port 1) 
03h = Secondary Slave (Port 3) 
All other values are Reserved. 


Register Index (RIDX) - R/W: This index field is used to specify one out of three 
7:0 





registers currently being indexed into. These three registers are the Serial ATA superset 
SStatus, SControl and SError memory registers and are port specific, hence for this 
SATA controller, there are four sets of these registers. Refer to Section 14.4.3.10, 
Section 14.4.3.11, and Section 14.4.3.12 for definitions of the SStatus, SControl and 
SError registers. 

00h = SSTS 

01h = SCTL 

02h = SERR 

All other values are Reserved. 
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14.3.2 SDATA - Serial ATA Data (D31:F2) 


Address Offset: SIDPBA + 04h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Data (DATA) - R/W: This Data register is a “window” through which data is read or 
written to from the register pointed to by the Serial ATA Index (SINDX) register above. 


Note that a physical register is not actually implemented as the data is actually stored 
in the memory mapped registers. 

Since this is not a physical register, the “default” value is the same as the default value 
of the register pointed to by SINDX.RI DX field. 
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PxSSTS—Serial ATA Status Register (D31:F2) 


Address Offset: Attribute: RO 
Default Value: 00000000h Size: 32 bits 


SDATA when SINDX.RIDxX is OOh. This is a 32-bit register that conveys the current state 
of the interface and host. The ICH9 updates it continuously and asynchronously. When 
the |CH9 transmits a COMRESET to the device, this register is updated to its reset 
values. 


a 


Interface Power Management (IPM) — RO. Indicates the current interface state: 
Value Description 
Oh Device not present or communication not established 
1h Interface in active state 
2h Interface in PARTIAL power management state 


6h Interface in SLUMBER power management state 


All other values reserved. 


(3.0 Gb/s). 


Device Detection (DET) — RO. Indicates the interface device detection and Phy 
state: 


Value Description 
Oh No device detected and Phy communication not established 
1h Device presence detected but Phy communication not established 
3h Device presence detected and Phy communication established 


Phy in offline mode as a result of the interface being disabled or 


an running in a BIST loopback mode 


All other values reserved. 


Current Interface Speed (SPD) — RO. Indicates the negotiated interface 
communication speed. 
Value Description 
Oh Device not present or communication not established 
74 1h Generation 1 communication rate negotiated 
2h Generation 2 communication rate negotiated 
All other values reserved. 
ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates 
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14,3.2.2 


PxSCTL — Serial ATA Control Register (D31:F2) 


Address Offset: Attribute: R/W, RO 
Default Value: 00000004h Size: 32 bits 


SDATA when SINDX.RIDX is OLh. This is a 32-bit read-write register by which software 
controls SATA capabilities. Writes to the SControl register result in an action being 
taken by the |CH9 or the interface. Reads from the register return the last value written 


a 
31:20 | Reserved 
11:8 

7:4 
3:0 


to it. 


19:16 | Port Multiplier Port (PMP) — RO. This field is not used by AHCI. 
15:12 | Select Power Management (SPM) — RO. This field is not used by AHCI. 


Interface Power Management Transitions Allowed (1PM) — R/W. Indicates which 
power states the ICH9 is allowed to transition to: 


Value Description 
Oh No interface restrictions 
1h Transitions to the PARTIAL state disabled 
2h Transitions to the SLUMBER state disabled 
3h Transitions to both PARTIAL and SLUMBER states disabled 
All other values reserved 


Speed Allowed (SPD) — R/W. Indicates the highest allowable speed of the interface. 
This speed is limited by the CAP.ISS (ABAR+00h: bit 23:20) field. 
Value Description 


Oh No speed negotiation restrictions 
1h Limit speed negotiation to Generation 1 communication rate 


2h Limit speed negotiation to Generation 2 communication rate 


All other values reserved. 


ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates 
(3.0 Gb/s). 


Device Detection Initialization (DET) — R/W. Controls the ICH9’s device detection 
and interface initialization. 
Value Description 
Oh No device detection or initialization action requested 
Perform interface communication initialization sequence to establish 
lh communication. This is functionally equivalent to a hard reset and 
results in the interface being reset and communications re- 
initialized 
4h Disable the Serial ATA interface and put Phy in offline mode 


All other values reserved. 

When this field is written to a 1h, the |CH9 initiates COMRESET and starts the 
initialization process. When the initialization is complete, this field shall remain Lh until 
set to another value by software. 

This field may only be changed to 1h or 4h when PxCMD.ST is 0. Changing this field 
while the ICH9 is running results in undefined behavior. 
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PxSERR—Serial ATA Error Register (D31:F2) 


Address Offset: Attribute: R/WC 
Default Value: 00000000h Size: 32 bits 


SDATA when SINDx.RIDX is 02h. 


Bits 26:16 of this register contains diagnostic error information for use by diagnostic 
software in validating correct operation or isolating failure modes. Bits 11:0 contain 
error information used by host software in determining the appropriate response to the 
error condition. If one or more of bits 11:8 of this register are set, the controller will 
stop the current transfer. 


eae 
26 
25 
24 
23 
22 
21 
20 
19 
18 
17 
16 
11 
10 


Exchanged (X): When set to one this bit indicates that a change in device presence 
has been detected since the last time this bit was cleared. This bit shall always be set to 
1 anytime a COMINIT signal is received. This bit is reflected in the POIS.PCS bit. 


Unrecognized FIS Type (F): Indicates that one or more FISs were received by the 
Transport layer with good CRC, but had a type field that was not recognized. 


Transport state transition error (T): Indicates that an error has occurred in the 
transition 

from one state to another within the Transport layer since the last time this bit was 
cleared. 


Transport state transition error (T): Indicates that an error has occurred in the 
transition 

from one state to another within the Transport layer since the last time this bit was 
cleared. 


detected by the recipient, a disparity or 8b/10b decoding error, or other error condition 
leading to a negative handshake on a transmitted frame. 


CRC Error (C): Indicates that one or more CRC errors occurred with the Link Layer. 


Disparity Error (D): This field is not used by AHCI. 


10b to 8b Decode Error (B): Indicates that one or more 10b to 8b decoding errors 
occurred. 


Comm Wake (W): Indicates that a Comm Wake signal was detected by the Phy. 


Phy Internal Error (1): Indicates that the Phy detected some internal error. 


PhyRdy Change (N): When set to 1 this bit indicates that the internal PhyRdy signal 
changed state since the last time this bit was cleared. In the ICH9, this bit will be set 
when PhyRdy changes from a O -> 1 or a 1 -> O. The state of this bit is then reflected 
in the PxIS.PRCS interrupt status bit and an interrupt will be generated if enabled. 
Software clears this bit by writing a 1 to it. 


Ue NEC ane 


Handshake (H): Indicates that one or more R_ERR handshake response was received 
in response to frame transmission. Such errors may be the result of a CRC error 


Internal Error (E): The SATA controller failed due to a master or target abort when 
attempting to access system memory. 


Protocol Error (P): A violation of the Serial ATA protocol was detected. 
SATA link. 


Note: The ICH9 does not set this bit for all protocol violations that may occur on the 


communications errors may arise from faulty interconnect with the device, from a 
device that has been removed or has failed, or a number of other causes. 





Persistent Communication or Data Integrity Error (C): A communication error 
that was not recovered occurred that is expected to be persistent. Persistent 
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7 2 re 
Le] Transient Data Integrity Error (T): A data integrity error occurred that was not 


recovered by the interface. 


Reserved. 


Recovered Communications Error (M): Communications between the device and 


host was temporarily lost but was re-established. This can arise from a device 
temporarily being removed, from a temporary loss of Phy synchronization, or from 
other causes and may be derived from the PhyNRdy signal between the Phy and Link 
layers. 


Recovered Data Integrity Error (1): A data integrity error occurred that was 
recovered by the interface through a retry operation or other recovery action. 
14.4 AHCI Registers (D31:F2) 


Note: These registers are AHCl-specific and available when the ICH9 is properly configured. 
The Serial ATA Status, Control, and Error registers are special exceptions and may be 
accessed on all |CH9 components if properly configured; see Section 14.3 for details. 





The memory mapped registers within the SATA controller exist in non-cacheable 
memory space. Additionally, locked accesses are not supported. If software attempts to 
perform locked transactions to the registers, indeterminate results may occur. Register 
accesses shall have a maximum size of 64-bits; 64-bit access must not cross an 8-byte 
alignment boundary. All memory registers are reset by Function Level Reset unless 
specified otherwise. 


The registers are broken into two sections - generic host control and port control. The 
port control registers are the same for all ports, and there are as many registers banks 
as there are ports. 


Table 14-3. AHCI Register Address Map 


i a 
Offset 
aoncre [= [Reseed 


Port 2 port control registers (Desktop Only) 

200h-27Fh P2PCR Registers are not available and software must not read or write 
registers. (Mobile Only) 
Port 3 port control registers (Desktop Only) 

280h- 2FFh P3PCR Registers are not available and software must not read or write 
registers. (Mobile Only) 

300h-37Fh P4PCR Port 4 port control registers 

380h-3FFh P5PCR Port 5 port control registers 
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14.4.1 AHCI Generic Host Control Registers (D31:F2) 


Table 14-4. Generic Host Controller Register Address Map 


ABAR + : 
‘ond | Mnemonic | ——_Resieter | eteut | ype 


FF22FFC2h 

—_ (desktop) 

00-03 CAP Host Capabilities DE127F03h 
(mobile) 


04-07 Global ICH9 Control 00000000h R/W, RO 
OCh- OFh | PL Ports Implemented 00000000h R/WO, RO 


10h-13h | = VS [AHCI Version = PAHCI Version = Version 00010200h | = RO | 


iaheizh | Beever’ | commend Completion Coalescing 00010121h R/W, RO 
Control 
18h-1Bh | CCC_PORTS ca Gomplerion ebaleseing 00000000h 


1Ch-1Fh EM_LOC | Enclosure Management Location 01000002h | RO | 


20h-23h | EM_CTRL | Enclosure Management Control 07010000h oe 


14.4.1.1 CAP—Host Capabilities Register (D31:F2) 


Address Offset: ABAR + 00h-03h Attribute: R/WO, RO 

Default Value: = FF22FFC2h (Desktop) Size: 32 bits 
DE127F03h (Mobile) 

Function Level Reset: No 





All bits in this register that are R/WO are reset only by PLTRST#. 


a 


Supports 64-bit Addressing (S64A) — RO. Indicates that the SATA controller can 
access 64-bit data structures. The 32-bit upper bits of the port DMA Descriptor, the 
PRD Base, and each PRD entry are read/write. 

Supports Command Queue Acceleration (SCQA) — RO. Hardwired to 1 to 
indicate that the SATA controller supports SATA command queuing via the DMA 
Setup FIS. The Intel® 1CH9 handles DMA Setup FlSes natively, and can handle auto- 
activate optimization through that FIS. 


Supports SNotification Register (SSNTF): — RO. The |CH9 SATA Controller does not 
support the SNotification register. 


Supports Interlock Switch (SIS) — R/WO. Indicates whether the SATA controller 
supports interlock switches on its ports for use in Hot Plug operations. This value is 
loaded by platform BIOS prior to OS initialization. 


If this bit is set, BlLOS must also map the SATAGP pins to the SATA controller through 
GPIO space. 

Supports Staggered Spin-up (SSS) — R/WO. Indicates whether the SATA 
controller supports staggered spin-up on its ports, for use in balancing power spikes. 
This value is loaded by platform BIOS prior to OS initialization. 

0 = Staggered spin-up not supported. 

1 = Staggered spin-up supported. 
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Supports Aggressive Link Power Management (SALP) — R/WO. 

0 = Software shall treat the PxCMD.ALPE and PxCMD.ASP bits as reserved. 

1 = The SATA controller supports auto-generating link requests to the partial or 
slumber states when there are no commands to process. 


Supports Activity LED (SAL) — RO. Indicates that the SATA controller supports a 
single output pin (SATALED#) which indicates activity. 


Supports Command List Override (SCLO) — R/WO. When set to '1', indicates 
that the Controller supports the PxCMD.CLO bit and it's associated function. When 
cleared to '0', The Controller is not capable of clearing the BSY and DRQ bits in the 
Status register in order to issue a software reset if these bits are still set from a 
previous operation. 


Interface Speed Support (ISS) — R/WO. Indicates the maximum speed the SATA 
controller can support on its ports. 
2h =3.0 Gb/s. 


Supports Non-Zero DMA Offsets (SNZO) — RO. Reserved, as per the AHCI Revision 
1.2 specification 


Supports AHCI Mode Only (SAM) — RO. The SATA controller may optionally 
support AHCI access mechanism only. 


0 = SATA controller supports both IDE and AHCI Modes 
1 = SATA controller supports AHCI Mode Only 


Supports Port Multiplier FIS Based Switching (PMFS) — RO. Reserved, as per 


the AHCI Revision 1.0 specification. 
NOTE: FIS Based Port Multiplier not supported by ICH9. 


Number of Command Slots (NCS) — RO. Hardwired to 1Fh to indicate support for 
32 slots. 

Command Completion Coalescing Supported (CCCS) — R/WO. 

0 = Command Completion Coalescing Not Supported 

1 = Command Completion Coalescing Supported 

Enclosure Management Supported (EMS) — R/WO. 

0 = Enclosure Management Not Supported 

1 = Enclosure Management Supported 

Supports External SATA (SXS) — R/WO. 

0 = External SATA is not supported on any ports 

1 = External SATA is supported on one or more ports 

When set, SW can examine each SATA port’s Command Register (PxCMD) to 
determine which port is routed externally. 


Number of Ports (NPS) — RO. Hardwired to 5h to indicate support for 6 ports. 
Note that the number of ports indicated in this field may be more than the number 
of ports indicated in the PI (ABAR + OCh) register. 
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14.4.1.2 GHC—Global | CH9 Control Register (D31:F2) 


Address Offset: ABAR + 04h-07h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


AHCI Enable (AE) — R/W. When set, indicates that an AHCI driver is loaded and the 

controller will be talked to via AHCI mechanisms. This can be used by an ICH9 that 

supports both legacy mechanisms (such as SFF-8038i) and AHCI to know when the 

controller will not be talked to as legacy. 

0 = Software will communicate with the |CH9 using legacy mechanisms. 

1 = Software will communicate with the |CH9 using AHCI. The |CH9 will not have to 
allow command processing via both AHCI and legacy mechanisms. 


Software shall set this bit to 1 before accessing other AHCI registers. 


oe 


MSI Revert to Single Message (MRSM) — RO: When set to '1' by hardware, 
indicates that the host controller requested more than one MSI vector but has reverted 
to using the first vector only. When this bit is cleared to '0', the Controller has not 
reverted to single MSI mode (i.e. hardware is already in single MSI mode, software has 
allocated the number of messages requested, or hardware is sharing interrupt vectors if 
MC.MME < MC.MMC). 

"MC.MSIE = '1' (MSI is enabled) 

"MC.MMC > 0 (multiple messages requested) 


"MC.MME > 0 (more than one message allocated) 


"MC.MME!= MC.MMC (messages allocated not equal to number requested) 


When this bit is set to '1', single MSI mode operation is in use and software is 
responsible for clearing bits in the IS register to clear interrupts. 


This bit shall be cleared to '0' by hardware when any of the four conditions stated is 
false. This bit is also cleared to '0' when MC.MSIE = '1' and MC.MME = Oh. In this case, 
the hardware has been programmed to use single MSI mode, and is not "reverting" to 
that mode. 


For ICH9, the Controller shall always revert to single MSI mode when the number of 
vectors allocated by the host is less than the number requested. This bit is ignored 
when GHC.HR = 1. 

Interrupt Enable (1E) — R/W. This global bit enables interrupts from the ICH9. 


0 = All interrupt sources from all ports are disabled. 
1 = Interrupts are allowed from the AHCI controller. 


Controller Reset (HR) — R/W. Resets |CH9 AHCI controller. 


0 = No effect 
1 = When set by SW, this bit causes an internal reset of the |CH9 AHCI controller. All 
state machines that relate to data transfers and queuing return to an idle condition, 
and all ports are re-initialized via COMRESET. 
NOTE: For further details, consult section 12.3.3 of the Serial ATA Advanced Host 
Controller Interface specification. 
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14.4.1.3 


1S—I nterrupt Status Register (D31:F2) 


Address Offset: ABAR + O08h-OBh Attribute: R/WC 
Default Value: 00000000h Size: 32 bits 


This register indicates which of the ports within the controller have an interrupt pending 
and require service. 


a 
Reserved. Returns 0. 


Reserved. Returns 0. 


Coalescing Interrupt Pending Status (CIPS) — R/WC. 

0 = No interrupt pending. 

1 = A command completion coalescing interrupt has been generated. 

Interrupt Pending Status Port[5] (1 PS[5]) — R/WC. 

0 = No interrupt pending. 

1 = Port 5 has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 

Interrupt Pending Status Port[4] (I PS[4]) — R/WC. 

0 = No interrupt pending. 

1 = Port 4 has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 

Interrupt Pending Status Port[3] (I PS[3]) — R/WC. 

0 = No interrupt pending. 

1 = Port 3 has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 

5 Interrupt Pending Status Port[2] (I PS[2]) — R/WC 


(Desktop 0 = No interrupt pending. 
Only) 1 = Port 2 has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 


3 
(Desktop 
Only) 


3:2 
(Mobile Reserved. Returns 0. 
Only) 


Interrupt Pending Status Port[1] (1 PS[1]) — R/WC. 

0 = No interrupt pending. 

1 = Port 1has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 


Interrupt Pending Status Port[0] (1 PS[0]) — R/WC. 

0 = No interrupt pending. 

1 = Port O has an interrupt pending. Software can use this information to determine 
which ports require service after an interrupt. 
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14.4.1.4 PIl—Ports Implemented Register (D31:F2) 


Address Offset: ABAR + OCh-OFh Attribute: R/WO, RO 
Default Value: 00000000h Size: 32 bits 
Function Level Reset: No 


This register indicates which ports are exposed to the |CH9. It is loaded by platform 
BIOS. It indicates which ports that the device supports are available for software to 
use. For ports that are not available, software must not read or write to registers within 


that port. 
Reserved. Returns 0. 


Ports Implemented Port 5 (P15) — R/WO. 
5 0 = The port is not implemented. 

1 = The port is implemented. 

This bit is read-only ‘0’ if MAP.SC = ‘0’ or SCC = ‘O1h’. 
3 


Ports Implemented Port 4 (P14) — R/WO. 


0 = The port is not implemented. 
1 = The port is implemented. 


This bit is read-only ‘0’ if MAP.SC = ‘0’ or SCC = ‘O1h’. 


Ports Implemented Port 3 (PI3) — RO. 
0 = The port is not implemented. 


Ports Implemented Port 3 (PI3) — R/WO. 


(Desktop | 0 = The port is not implemented. 
Only) 1 = The port is implemented. 


Ports Implemented Port 2 (PI2) — RO. 
0 = The port is not implemented. 


Ports Implemented Port 2 (PI2)— R/WO. 
(Desktop | 0 = The port is not implemented. 
Only) 1 = The port is implemented. 
Ports Implemented Port 1 (PI1) — R/WO. 
0 = The port is not implemented. 
1 = The port is implemented. 
Ports Implemented Port 0 (PIO) — R/WO. 


0 = The port is not implemented. 
1 = The port is implemented. 
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14.4.1.5 VS—AHCI Version (D31:F2) 


Address Offset: ABAR + 10h-13h Attribute: RO 
Default Value: 00010200h Size: 32 bits 


This register indicates the major and minor version of the AHCI specification. It is BCD 
encoded. The upper two bytes represent the major version number, and the lower two 
bytes represent the minor version number. Example: Version 3.12 would be 
represented as 00030102h. The current version of the specification is 1.20 
(00010200h). 


os 


31:16 | Major Version Number (MJR) — RO. Indicates the major version is 1 
15:0 Minor Version Number (MNR) — RO. Indicates the minor version is 20. 





14.4.1.6 Ccc_CTL—Command Completion Coalescing Control Register (D31:F2) 


Address Offset: ABAR + 14h-17h Attribute: R/W, RO 
Default Value: 00010131h Size: 32 bits 


This register is used to configure the command coalescing feature. This register is 
reserved if command coalescing is not supported (CAP_CCCS = ‘0’). 


a 


Timeout Value (TV) — R/W. The timeout value is specified in 10 microsecond 
intervals. hbaCCC_Timer is loaded with this timeout value. hbaCCC_Timer is only 
decremented when commands are outstanding on the selected ports. The Controller 
will signal a CCC interrupt when hbaCCC_Timer has decremented to ‘0’. The 
hbaCCC_Timer is reset to the timeout value on the assertion of each CCC interrupt. A 
timeout value of 0 is invalid. 


Command Completions (CC) — R/W. Specifies the number of command 
completions that are necessary to cause a CCC interrupt. The Controller has an 
internal command completion counter, hbaCCC_CommandsComplete. 
hbaCCC_CommandsComplete is incremented by one each time a selected port has a 
command completion. When hbaCCC_CommandsComplete is equal to the command 
completions value, a CCC interrupt is signaled. The internal command completion 
counter is reset to ‘0’ on the assertion of each CCC interrupt. 


Interrupt (INT) — RO. Specifies the interrupt used by the CCC feature. This 
interrupt must be marked as unused in the AHCI Ports Implemented memory register 


by the corresponding bit being set to ‘0’. Thus, the CCC_interrupt corresponds to the 
interrupt for an unimplemented port on the controller. When a CCC interrupt occurs, 
the IS[INT] bit shall be asserted to ‘1’ regardless of whether PIRQ interrupt or MSI is 


Note that in MSI, CC interrupt may share an interrupt vector with other ports. For 
example, if the number of message allocated is 4, then CCC interrupt share interrupt 
vector 3 along with port 3, 4, and 5 but IS[6] shall get set. 


Enable (EN) — R/W. 

0 = The command completion coalescing feature is disabled and no CCC interrupts are 
generated 

1 = The command completion coalescing feature is enabled and CCC interrupts may 
be generated based on timeout or command completion conditions. 


Software shall only change the contents of the TV and CC fields when EN is cleared to 
‘O'. On transition of this bit from '0' to '1', any updated values for the TV and CC fields 
shall take effect. 
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14.4.1.7 CCC_Ports—Command Completion Coalescing Ports Register (D31:F2) 


Address Offset: ABAR + 18h-1Bh Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register is used to specify the ports that are coalesced as part of the CCC feature 
when CCC_CTL.EN = ‘1’. This register is reserved if command coalescing is not 
supported (CAP_CCCS = ‘0’). 


cl rrr 


Ports (PRT) — R/W. 
0 = The port is not part of the command completion coalescing feature. 
1 = The corresponding port is part of the command completion coalescing feature. 


Bits set to ‘1’ in this register must also have the corresponding bit set to ‘1’ in the 
Ports Implemented register. 
Bits set to '1' in this register must also have the corresponding bit set to '1' in the 
Ports |! mplemented register. An updated value for this field shall take effect within one 
timer increment (1 millisecond). 





14.4.1.8 EM_LOC—Enclosure Management Location Register (D31:F2) 


Address Offset: ABAR + 1Ch-1Fh Attribute: RO 
Default Value: 01000002h Size: 32 bits 


This register identifies the location and size of the enclosure management message 
buffer. This register is reserved if enclosure management is not supported (i.e. 
CAP.EMS = 0). 


os 


Offset (OFST) — RO. The offset of the message buffer in Dwords from the beginning 
31:16 
of the ABAR. 


Buffer Size (SZ) — RO. Specifies the size of the transmit message buffer area in 
15:0 Dwords. The ICH9 SATA controller only supports transmit buffer. 


A value of ‘0’ is invalid. 
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14.4.1.9 


EM_CTRL—Enclosure Management Control Register (D31:F2) 


Address Offset: ABAR + 20h-23h Attribute: R/W, R/WO, RO 
Default Value: 07010000h Size: 32 bits 


This register is used to control and obtain status for the enclosure management 
interface. This register includes information on the attributes of the implementation, 
enclosure management messages supported, the status of the interface, whether any 
message are pending, and is used to initiate sending messages. This register is 
reserved if enclosure management is not supported (CAP_EMS = ‘0’). 


eee ee 
31:27 | Reserved 


Activity LED Hardware Driven (ATTR.ALHD) — R/WO. 

1 = The SATA controller drives the activity LED for the LED message type in hardware 
and does not utilize software for this LED. 

The host controller does not begin transmitting the hardware based activity signal 

until after software has written CTL.TM=1 after a reset condition. 


Transmit Only (ATTR.XMT) — RO. 
25 0 = The SATA controller supports transmitting and receiving messages. 
1 = The SATA controller only supports transmitting messages and does not support 
receiving messages. 
Single Message Buffer (ATTR.SMB) — RO. 
0 = There are separate receive and transmit buffers such that unsolicited messages 
24 could be supported. 
1 = The SATA controller has one message buffer that is shared for messages to 


transmit and messages received. Unsolicited receive messages are not supported 
and it is software’s responsibility to manage access to this buffer. 


SGPIO Enclosure Management Messages (SUPP.SGPI QO): — RO. 
1 = The SATA controller supports the SGPIO register interface message type. 


SES-2 Enclosure Management Messages (SUPP.SES2): — RO. 


SAF-TE Enclosure Management Messages (SUPP.SAFTE): — RO. 
1 = The SATA controller supports the SAF-TE message type. 


LED Message Types (SUPP.LED): — RO. 
1 = The SATA controller supports the LED message type. 


Reset (RST): — R/W. 

0 = A write of ‘0’ to this bit by software will have no effect. 

1 = When set by software, The SATA controller shall reset all enclosure management 
message logic and take all appropriate reset actions to ensure messages can be 
transmitted / received after the reset. After the SATA controller completes the 
reset operation, the SATA controller shall set the value to ‘0’. 


Transmit Message (CTL.TM): — R/W. 
0 = A write of ‘0’ to this bit by software will have no effect. 
1 = When set by software, The SATA controller shall transmit the message contained 


18 
1 = The SATA controller supports the SES-2 message type. 


in the message buffer. When the message is completely sent, the SATA controller 
shall set the value to ‘0’. 


Software shall not change the contents of the message buffer while CTL.TM is set to 
a 

Reserved 

Message Received (STS.MR): — RO. Message Received is not supported in 1CH9. 
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14.4.2 Vendor Specific Registers (D31:F2) 


14.4.2.1 VvSP—Vendor Specific (D31:F2) 


Address Offset: ABAR + AOh-A3h Attribute: RO, RWO 
Default Value: 00000000h Size: 32 bits 


31:1 | Reserved 


fe Supports Low Power Device Detection (SLPD)— RWO 


Indicates whether SATA power management and device hot (un)pulg is supported. 
0 = Not supported. 
1 = Supported. 





14.4.3 Port Registers (D31:F2) 


Ports not available will result in the corresponding Port DMA register space being 
reserved. The controller shall ignore writes to the reserved space on write cycles and 
shall return ‘0’ on read cycle accesses to the reserved location. 


Table 14-5. Port [5:0] DMA Register Address Map (Sheet 1 of 4) 


[ss [wm [ee 

Offset 

fp narcaa7e [POE [Pore OTeterrupeEnable 

paceniee [= (Reeves 

pschav [— _[Reened SS SCSC~CSCSCSCSCSCSY 
18Ch-18Fh Port 1 FIS Base Address Upper 32-Bits 
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Table 14-5. Port [5:0] DMA Register Address Map (Sheet 2 of 4) 


Offset 
194h-197h Port 1 Interrupt Enable 
198h-19Bh Port 1 Command 
19Ch-19Fh oS Reserved 
1A0h- 1A3h Port 1 Task File Data 
1A4h-1A7h Port 1 Signature 
1A8h- 1ABh Port 1 Serial ATA Status 
1ACh- 1AFh Port 1 Serial ATA Control 
1B0h-1B3h Port 1 Serial ATA Error 
1B4h-1B7h Port 1 Serial ATA Active 
1B8h-1BBh Port 1 Command Issue 


1BCh-1FFh Reserved 


Reserved 
Cet nee Registers are not available and software must not read 
(Mobile Only) 


from or write to registers. 


200h-203h Port 2 Command List Base Address 
204h-207h Port 2 Command List Base Address Upper 32-Bits 
208h-20Bh Port 2 FIS Base Address 

20Ch-20Fh Port 2 FIS Base Address Upper 32-Bits 
210h-213h Port 2 Interrupt Status 

214h-217h Port 2 Interrupt Enable 

218h-21Bh Port 2 Command 

21Ch-21Fh ee Reserved 

220h-223h Port 2 Task File Data 

224h-227h Port 2 Signature 

228h-22Bh Port 2 Serial ATA Status 

22Ch-22Fh Port 2 Serial ATA Control 

230h-233h Port 2 Serial ATA Error 

234h-237h Port 2 Serial ATA Active 

238h-23Bh Port 2 Command Issue 


23Ch-27Fh Reserved 


Reserved 
eounee rey Registers are not available and software must not read 
(Mobile Only) 


from or write to registers. 


280h-283h Port 3 Command List Base Address 

284h-287h Port 3 Command List Base Address Upper 32-Bits 
288h-28Bh Port 3 FIS Base Address 

28Ch-28Fh Port 3 FIS Base Address Upper 32-Bits 
290h-293h Port 3 Interrupt Status 
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Table 14-5. Port [5:0] DMA Register Address Map (Sheet 3 of 4) 


Offset 
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Table 14-5. Port [5:0] DMA Register Address Map (Sheet 4 of 4) 


ee Register 
Offset 3 
3A8h- 3ABh P5SSTS Port 5 Serial ATA Status 
3ACh- 3AFh P5SCTL Port 5 Serial ATA Control 


3B4h-3B7h P5SACT Port 5 Serial ATA Active 
3B8h- 3BBh P5Cl Port 5 Command Issue 
3BCh-3FFh = | Reserved 


14.4.3.1 PxCLB—Port [5:0] Command List Base Address Register 
(D31:F2) 


Address Offset: Port 0: ABAR + 100h Attribute: R/W 
Port 1: ABAR + 180h 
Port 2: ABAR + 200h (Desktop Only) 
Port 3: ABAR + 280h (Desktop Only) 
Port 4: ABAR + 300h 
Port 5: ABAR + 380h 
Default Value: Undefined Size: 32 bits 


a 


Command List Base Address (CLB) — R/W. Indicates the 32-bit base for the 
command list for this port. This base is used when fetching commands to execute. The 
structure pointed to by this address range is 1 KB in length. This address must be 1-KB 
aligned as indicated by bits 31:10 being read/write. 


Note that these bits are not reset on a Controller reset. 


[9:0 | Reserved 


14.4.3.2 PxCLBU—Port [5:0] Command List Base Address Upper 
32-Bits Register (D31:F2) 


Address Offset: Port 0: ABAR + 104h Attribute: R/W 
Port 1: ABAR + 184h 
Port 2: ABAR + 204h (Desktop Only) 
Port 3: ABAR + 284h (Desktop Only) 
Port 4: ABAR + 304h 
Port 5: ABAR + 384h 
Default Value: Undefined Size: 32 bits 


a 


Command List Base Address Upper (CLBU) — R/W. Indicates the upper 32-bits for 


3BOh- 3B3h P5SERR Port 5 Serial ATA Error 








the command list base address for this port. This base is used when fetching 
commands to execute. 


Note that these bits are not reset on a Controller reset. 
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14.4.3.3 


14.4.3.4 


590 


PxFB—Port [5:0] FIS Base Address Register (D31:F2) 


Address Offset: Port 0: ABAR + 108h Attribute: R/W 
Port 1: ABAR + 188h 
Port 2: ABAR + 208h (Desktop Only) 
Port 3: ABAR + 288h (Desktop Only) 
Port 4: ABAR + 308h 
Port 5: ABAR + 388h 
Default Value: Undefined Size: 32 bits 


a 


FIS Base Address (FB) — R/W. Indicates the 32-bit base for received FlSes. The 
structure pointed to by this address range is 256 bytes in length. This address must be 


256-byte aligned, as indicated by bits 31:3 being read/write. 
Note that these bits are not reset on a Controller reset. 


PxFBU—Port [5:0] FIS Base Address Upper 32-Bits 
Register (D31:F2) 


Address Offset: Port 0: ABAR + 10Ch Attribute: R/W 
Port 1: ABAR + 18Ch 
Port 2: ABAR + 20Ch (Desktop Only) 
Port 3: ABAR + 28Ch (Desktop Only) 
Port 4: ABAR + 30Ch 
Port 5: ABAR + 38Ch 
Default Value: Undefined Size: 32 bits 


a 


Command List Base Address Upper (CLBU) — R/W. Indicates the upper 32-bits for 





the received FIS base for this port. 
Note that these bits are not reset on a Controller reset. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


® 
SATA Controller Registers (D31:F2) [ n tel 


14.4.3.5 


PxIS—Port [5:0] Interrupt Status Register (D31:F2) 


Address Offset: Port 0: ABAR + 110h Attribute: R/WC, RO 
Port 1: ABAR + 190h 
Port 2: ABAR + 210h (Desktop Only) 
Port 3: ABAR + 290h (Desktop Only) 
Port 4: ABAR + 310h 
Port 5: ABAR + 390h 
Default Value: 00000000h Size: 32 bits 


Cold Port Detect Status (CPDS) — RO. Cold presence detect is not supported. 


Task File Error Status (TFES) — R/WC. This bit is set whenever the status register is 
updated by the device and the error bit (PxTFD.bit 0) is set. 


Host Bus Fatal Error Status (HBFS) — R/WC. Indicates that the Intel® ICH9 
encountered an error that it cannot recover from due to a bad software pointer. In PCI, 
such an indication would be a target or master abort. 


Host Bus Data Error Status (HBDS) — R/WC. Indicates that the |CH9 encountered a 
data error (uncorrectable ECC / parity) when reading from or writing to system 
memory. 


Interface Fatal Error Status (IFS) — R/WC. Indicates that the |CH9 encountered an 
error on the SATA interface which caused the transfer to stop. 


Interface Non-fatal Error Status (INFS) — R/WC. Indicates that the ICH9 
encountered an error on the SATA interface but was able to continue operation. 


24 Overflow Status (OFS) — R/WC. Indicates that the |CH9 received more bytes from a 
device than was specified in the PRD table for the command. 
Incorrect Port Multiplier Status (IPMS) — R/WC. Indicates that the ICH9 received 
23 a FIS from a device whose Port Multiplier field did not match what was expected. 
NOTE: Port Multiplier not supported by ICH9. 
PhyRdy Change Status (PRCS) — RO. When set to one indicates the internal PhyRdy 
signal changed state. This bit reflects the state of PXSERR.DIAG.N. Unlike most of the 
other bits in the register, this bit is RO and is only cleared when PxSERR.DIAG.N is 
2 cleared. 
Note that the internal PhyRdy signal also transitions when the port interface enters 
partial or slumber power management states. Partial and slumber must be disabled 


when Surprise Removal Notification is desired, otherwise the power management state 
transitions will appear as false insertion and removal events. 


Reserved 


Device I nterlock Status (DIS) — R/WC. When set, indicates that a platform interlock 
switch has been opened or closed, which may lead to a change in the connection state 
of the device. This bit is only valid in systems that support an interlock switch (CAP.SIS 
[ABAR+00: bit 28] set). 


For systems that do not support an interlock switch, this bit will always be 0. 


Port Connect Change Status (PCS) — RO. This bit reflects the state of 
PxSERR.DIAG.X. (ABAR+130h/1D0h/230h/2DOh, bit 26) Unlike other bits in this 
register, this bit is only cleared when PXSERR.DIAG.X is cleared. 

0 = No change in Current Connect Status. 

1 = Change in Current Connect Status. 


Descriptor Processed (DPS) — R/WC. A PRD with the | bit set has transferred all its 
data. 
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Unknown FIS Interrupt (UFS) — RO. When set to ‘1’ indicates that an unknown FIS 
was received and has been copied into system memory. This bit is cleared to ‘0’ by 
software clearing the PXSERR.DIAG.F bit to ‘0’. Note that this bit does not directly 


reflect the PxSERR.DIAG.F bit. P<SERR.DIAG.F is set immediately when an unknown 
FIS is detected, whereas this bit is set when the FIS is posted to memory. Software 
should wait to act on an unknown FIS until this bit is set to ‘1’ or the two bits may 
become out of sync. 


Set Device Bits Interrupt (SDBS) — R/WC. A Set Device Bits FIS has been received 
with the | bit set and has been copied into system memory. 


2 DMA Setup FIS Interrupt (DSS) — R/WC. A DMA Setup FIS has been received with 
the | bit set and has been copied into system memory. 
pe PIO Setup FIS Interrupt (PSS) — R/WC. A PIO Setup FIS has been received with the 
1 


| bit set, it has been copied into system memory, and the data related to that FIS has 
been transferred. 


Device to Host Register FIS Interrupt (DHRS) — R/WC.AD2H Register FIS has 
been received with the | bit set, and has been copied into system memory. 





14.4.3.6 Px! E—Port [5:0] Interrupt Enable Register (D31:F2) 


Address Offset: Port 0: ABAR + 114h Attribute: R/W, RO 
Port 1: ABAR + 194h 
Port 2: ABAR + 214h (Desktop Only) 
Port 3: ABAR + 294h (Desktop Only) 
Port 4: ABAR + 314h 
Port 5: ABAR + 394h 
Default Value: 00000000h Size: 32 bits 


This register enables and disables the reporting of the corresponding interrupt to 
system software. When a bit is set (‘1’) and the corresponding interrupt condition is 
active, then an interrupt is generated. Interrupt sources that are disabled (‘0’) are still 
reflected in the status registers. 


oe 


Cold Presence Detect Enable (CPDE) — RO. Cold Presence Detect is not supported. 


(due to a reception of the error register from a received FIS) are set, the Intel® ICH9 
will generate an interrupt. 


Host Bus Fatal Error Enable (HBFE) — R/W. When set, and GHC.IE and PxS.HBFS 
are set, the ICH9 will generate an interrupt. 


: Task File Error Enable (TFEE) — R/W. When set, and GHC.IE and PxTFD.STS.ERR 
30 


Host Bus Data Error Enable (HBDE) — R/W. When set, and GHC.IE and PxS.HBDS 
are set, the ICH9 will generate an interrupt. 

27 Host Bus Data Error Enable (HBDE) — R/W. When set, GHC.IE is set, and 
PxIS.HBDS is set, the ICH9 will generate an interrupt. 


6 Interface Non-fatal Error Enable (I NFE) — R/W. When set, GHC.IE is set, and 
PxIS.INFS is set, the ICH9 will generate an interrupt. 


Reserved 


Overflow Error Enable (OFE) — R/W. When set, and GHC.IE and PxS.OFS are set, 
the ICH9 will generate an interrupt. 
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Incorrect Port Multiplier Enable (I PME) — R/W. When set, and GHC.IE and 
PxIS.IPMS are set, the ICH9 will generate an interrupt. 
NOTE: Should be written as 0. Port Multiplier not supported by ICH9. 


PhyRdy Change Interrupt Enable (PRCE) — R/W. When set, and GHC.IE is set, and 
PxIS.PRCS is set, the ICH9 shall generate an interrupt. 

Reserved 

Device Interlock Enable (DIE) — R/W. When set, and PxIS.DIS is set, the ICH9 will 


generate an interrupt. 
For systems that do not support an interlock switch, this bit shall be a read-only 0. 


Port Change Interrupt Enable (PCE) — R/W. When set, and GHC.IE and PxS.PCS 
are set, the ICH9 will generate an interrupt. 
Descriptor Processed Interrupt Enable (DPE) — R/W. When set, and GHC.IE and 
PxS.DPS are set, the ICH9 will generate an interrupt 

cs Unknown FIS Interrupt Enable (UFIE) — R/W. When set, and GHC.IE is set and an 


unknown FIS is received, the |CH9 will generate this interrupt. 


Set Device Bits FIS Interrupt Enable (SDBE) — R/W. When set, and GHC.IE and 
PxS.SDBS are set, the ICH9 will generate an interrupt. 


DMA Setup FIS Interrupt Enable (DSE) — R/W. When set, and GHC.IE and PxS.DSS 
are set, the ICH9 will generate an interrupt. 
PIO Setup FIS Interrupt Enable (PSE) — R/W. When set, and GHC.IE and PxS.PSS 
are set, the ICH9 will generate an interrupt. 


Device to Host Register FIS Interrupt Enable (DHRE) — R/W. When set, and 
GHC.IE and PxS.DHRS are set, the ICH9 will generate an interrupt. 
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14.4.3.7 PxCMD—Port [5:0] Command Register (D31:F2) 


Address Offset: Port 0: ABAR + 118h Attribute: R/W, RO, R/WO 
Port 1: ABAR + 198h 
Port 2: ABAR + 218h (Desktop Only) 
Port 3: ABAR + 298h (Desktop Only) 
Port 4: ABAR + 318h 
Port 5: ABAR + 398h 
Default Value: o0000w00wh Size: 32 bits 
where w = 00?0b (for?, see bit description) 
Function Level Reset: No (Bit 21, 19 and 18 only) 


a 


Interface Communication Control (ICC) — R/W. This is a four bit field which can 
be used to control reset and power states of the interface. Writes to this field will 
cause actions on the interface, either as primitives or an OOB sequence, and the 
resulting status of the interface will be reported in the PxSSTS register (Address 
offset Port 0: ABAR+124h, Port 1: ABAR+1A4h, Port 2: ABAR+224h, Port 3: 
ABAR+2A4h, Port 4: ABAR+224h, Port 5: ABAR+2A4h). 


Value Definition 
Fh- 7h Reserved 


Slumber: This will cause the Intel® ICH9 to request a transition of the 
6h interface to the slumber state. The SATA device may reject the request 
and the interface will remain in its current state 


Reserved 


Partial: This will cause the |CH9 to request a transition of the interface 
to the partial state. The SATA device may reject the request and the 
interface will remain in its current state. 


Active: This will cause the ICH9 to request a transition of the interface 
into the active 


No-Op / Idle: When software reads this value, it indicates the ICH9 is 
not in the process of changing the interface state or sending a device 
reset, and a new link command may be issued. 


When system software writes a non-reserved value other than No-Op (Oh), the |CH9 

will perform the action and update this field back to Idle (Oh). 

If software writes to this field to change the state to a state the link is already in (e.g. 

interface is in the active state and a request is made to go to the active state), the 

ICH9 will take no action and return this field to Idle. 

NOTE: When the ALPE bit (bit 26) is set, then this register should not be set to 02h 
or 06h. 


Aggressive Slumber / Partial (ASP) — R/W. When set, and the ALPE bit (bit 26) is 
set, the |CH9 shall aggressively enter the slumber state when it clears the PxCl 
register and the PxSACT register is cleared. When cleared, and the ALPE bit is set, the 
ICH9 will aggressively enter the partial state when it clears the PxCl register and the 
PxSACT register is cleared. If CAP.SALP is cleared to '0', software shall treat this bit as 
reserved. 


Aggressive Link Power Management Enable (ALPE) — R/W. When set, the |CH9 
will aggressively enter a lower link power state (partial or slumber) based upon the 
setting of the ASP bit (bit 27). 
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a 
Drive LED on ATAPI Enable (DLAE) — R/W. When set, the |CH9 will drive the LED 
25 pin active for ATAPI commands (PxCLB[CHz.A] set) in addition to ATA commands. 
When cleared, the ICH9 will only drive the LED pin active for ATA commands. See 


Section 5.16.9 for details on the activity LED. 


Device is ATAPI (ATAPI) — R/W. When set, the connected device is an ATAPI 
device. This bit is used by the |CH9 to control whether or not to generate the desktop 
LED when commands are active. See Section 5.16.9 for details on the activity LED. 


23:22 Reserved 


External SATA Port (ESP) — R/WO. 


0 = This port supports internal SATA devices only. 
1 = This port will be used with an external SATA device. When set, CAP.SXS must also 
be set. 


This bit is not reset by Function Level Reset. 


Interlock Switch Attached to Port (ISP) — R/WO. When interlock switches are 
supported in the platform (CAP.SIS [ABAR+00h: bit 28] set), this indicates whether 
this particular port has an interlock switch attached. This bit can be used by system 
software to enable such features as aggressive power management, as diSconnects 
can always be detected regardless of PHY state with an interlock switch. When this bit 
is set, it is expected that HPCP (bit 18) in this register is also set. 

The ICH9 takes no action on the state of this bit - it is for system software only. For 
example, if this bit is cleared, and an interlock switch toggles, the ICH9 still treats it 
as a proper interlock switch event. 


Note that these bits are not reset on a Controller reset. 
This bit is not reset by Function Level Reset. 


Hot Plug Capable Port (HPCP) — R/WO. 

0 = Port is not capable of Hot-Plug. 

1 = Port is Hot-Plug capable. 

This indicates whether the platform exposes this port to a device which can be Hot- 

Plugged. SATA by definition is hot-pluggable, but not all platforms are constructed to 
18 


allow the device to be removed (it may be screwed into the chassis, for example). 
This bit can be used by system software to indicate a feature such as “eject device” to 
the end-user. The ICH9 takes no action on the state of this bit - it is for system 
software only. For example, if this bit is cleared, and a Hot-Plug event occurs, the 
ICH9 still treats it as a proper Hot-Plug event. 

Note that these bits are not reset on a Controller reset. 


This bit is not reset by Function Level Reset. 


Reserved 


Port Multiplier FiS Based Switching Enable (PMFSE) — RO. The 1CH9 does not support 
FIS-based switching. 
NOTE: FIS Port Multiplier not supported by ICH9. 


Controller Running (CR) — RO. When this bit is set, the DMA engines for a port are 
running. See section 5.2.2 of the Serial ATA AHCI Specification for details on when 
this bit is set and cleared by the |CH9. 


FIS Receive Running (FR) — RO. When set, the FIS Receive DMA engine for the 
port is running. See section 12.2.2 of the Serial ATA AHCI Specification for details on 
when this bit is set and cleared by the ICH9. 
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Interlock Switch State (ISS) — RO. For systems that support interlock switches 
(via CAP.SIS [ABAR+00h: bit 28]), if an interlock switch exists on this port (via ISP in 
this register), this bit indicates the current state of the interlock switch. A 0 indicates 
the switch is closed, and a 1 indicates the switch is opened. 

For systems that do not support interlock switches, or if an interlock switch is not 
attached to this port, this bit reports 0. 


Current Command Slot (CCS) — RO. Indicates the current command slot the |CH9 
is processing. This field is valid when the ST bit is set in this register, and is constantly 
updated by the ICH9. This field can be updated as soon as the ICH9 recognizes an 
active command slot, or at some point soon after when it begins processing the 
command. 


This field is used by software to determine the current command issue location of the 
ICH9. In queued mode, software shall not use this field, as its value does not 
represent the current command being executed. Software shall only use PxCl and 
PxSACT when running queued commands. 


FIS Receive Enable (FRE) — R/W. When set, the ICH9 may post received FlSes 
into the FIS receive area pointed to by PxFB (ABAR+108h/188h/208h/288h) and 
PxFBU (ABAR+10Ch/18Ch/20Ch/28Ch). When cleared, received FlSes are not 
accepted by the ICH9, except for the first D2H (device-to-host) register FIS after the 
initialization sequence. 

System software must not set this bit until PxFB (PxFBU) have been programmed 
with a valid pointer to the FIS receive area, and if software wishes to move the base, 
this bit must first be cleared, and software must wait for the FR bit (bit 14) in this 
register to be cleared. 


Command List Override (CLO) — R/W. Setting this bit to '1' causes 
PxTFD.STS.BSY and PxTFD.STS.DRQ to be cleared to '0'. This allows a software reset 
to be transmitted to the device regardless of whether the BSY and DRQ bits are still 
set in the PxTFD.STS register. The Controller sets this bit to '0' when PxTFD.STS.BSY 
and PxTFD.STS.DRQ have been cleared to '0'. A write to this register with a value of 
‘O' shall have no effect. 


This bit shall only be set to '1' immediately prior to setting the PxCMD.ST bit to '1' 
from a previous value of '0'. Setting this bit to '1' at any other time is not supported 
and will result in indeterminate behavior. Software must wait for CLO to be cleared to 
'0' before setting PxCMD.ST to '1'. 
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Power On Device (POD) — RO. Cold presence detect not supported. Defaults to 1. 


Spin-Up Device (SUD) — R/W / RO 

This bit is R/W and defaults to 0 for systems that support staggered spin-up (R/W 

when CAP.SSS (ABAR+00h: bit 27) is 1). Bit is RO 1 for systems that do not support 

staggered spin-up (when CAP.SSS is 0). 

0 = No action. 

1 = On an edge detect from 0 to 1, the ICH9 starts a COMRESET initialization 
sequence to the device. 

Clearing this bit to '0' does not cause any OOB signal to be sent on the interface. 

When this bit is cleared to '0' and PxSCTL.DET=0h, the Controller will enter listen 

mode. 


Start (ST) — R/W. When set, the I|CH9 may process the command list. When 
cleared, the |CH9 may not process the command list. Whenever this bit is changed 
from a 0 to a1, the ICH9 starts processing the command list at entry 0. Whenever 
this bit is changed from a 1 to a 0, the PxCl register is cleared by the |CH9 upon the 
ICH9 putting the controller into an idle state. 

Refer to section 12.2.1 of the Serial ATA AHCI Specification for important restrictions 
on when ST can be set to 1. 





14.4.3.8 PxTFD—Port [5:0] Task File Data Register (D31:F2) 


Address Offset: Port 0: ABAR + 120h Attribute: RO 
Port 1: ABAR + 1A0h 
Port 2: ABAR + 220h (Desktop Only) 
Port 3: ABAR + 2A0h (Desktop Only) 
Port 4: ABAR + 320h 
Port 5: ABAR + 3A0h 
Default Value: 0000007Fh Size: 32 bits 


This is a 32-bit register that copies specific fields of the task file when FlSes are 
received. The FlSes that contain this information are: 


D2H Register FIS 
PIO Setup FIS 
Set Device Bits FIS 


} Bit | Description 
Error (ERR) — RO. Contains the latest copy of the task file error register. 





Status (STS) — RO. Contains the latest copy of the task file status register. Fields of 
note in this register that affect AHCI. 
Bit Field Definition 
7 BSY Indicates the interface is busy 
7:0 6:4 N/A Not applicable 
3 DRQ Indicates a data transfer is requested 
2:1 N/A Not applicable 
0 ERR Indicates an error during the transfer 
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14.4.3.9 PxSI G—Port [5:0] Signature Register (D31:F2) 


Address Offset: Port 0: ABAR + 124h Attribute: RO 
Port 1: ABAR + 1A4h 
Port 2: ABAR + 224h (Desktop Only) 
Port 3: ABAR + 2A4h (Desktop Only) 
Port 4: ABAR + 324h 
Port 5: ABAR + 3A4h 
Default Value: FFFFFFFFh Size: 32 bits 


This is a 32-bit register which contains the initial signature of an attached device when 
the first D2H Register FIS is received from that device. It is updated once after a reset 
sequence. 


a 


Signature (SIG) — RO. Contains the signature received from a device on the first D2H 
register FIS. The bit order is as follows: 


Bit Field 
31:24 LBA High Register 
23:16 LBA Mid Register 
15:8 LBA Low Register 

7:0 Sector Count Register 
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14.4.3.10 PxSSTS—Port [5:0] Serial ATA Status Register (D31:F2) 


Address Offset: Port 0: ABAR + 128h Attribute: RO 
Port 1: ABAR + 1A8h 
Port 2: ABAR + 228h (Desktop Only) 
Port 3: ABAR + 2A8h (Desktop Only) 
Port 4: ABAR + 328h 
Port 5: ABAR + 3A8h 
Default Value: 00000000h Size: 32 bits 


This is a 32-bit register that conveys the current state of the interface and host. The 
ICH9 updates it continuously and asynchronously. When the ICH9 transmits a 
COMRESET to the device, this register is updated to its reset values. 


7 arr 
31:12 | Reserved 


Interface Power Management (IPM) — RO. Indicates the current interface state: 
Value Description 
Oh Device not present or communication not established 
1h Interface in active state 
2h Interface in PARTIAL power management state 


6h Interface in SLUMBER power management state 
All other values reserved. 


S). 


Device Detection (DET) — RO. Indicates the interface device detection and Phy 
state: 


Value Description 
Oh No device detected and Phy communication not established 
1h Device presence detected but Phy communication not established 
3h Device presence detected and Phy communication established 


Phy in offline mode as a result of the interface being disabled or 


4n running in a BIST loopback mode 





Current I nterface Speed (SPD) — RO. Indicates the negotiated interface 
communication speed. 
Value Description 
Oh Device not present or communication not established 
7:4 1h Generation 1 communication rate negotiated 
2h Generation 2 communication rate negotiated 
All other values reserved. 
ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates (3.0 Gb/ 


All other values reserved. 
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14.4.3.11 PxSCTL — Port [5:0] Serial ATA Control Register (D31:F2) 


Address Offset: Port 0: ABAR + 12Ch Attribute: R/W, RO 
Port 1: ABAR + 1ACh 
Port 2: ABAR + 22Ch (Desktop Only) 
Port 3: ABAR + 2ACh (Desktop Only) 
Port 4: ABAR + 32Ch 
Port 5: ABAR + 3ACh 
Default Value: 00000004h Size: 32 bits 


This is a 32-bit read-write register by which software controls SATA capabilities. Writes 
to the SControl register result in an action being taken by the |CH9 or the interface. 
Reads from the register return the last value written to it. 


Pepe 


Interface Power Management Transitions Allowed (IPM) — R/W. Indicates which 
power states the ICH9 is allowed to transition to: 


Value Description 


Oh No interface restrictions 


Speed Allowed (SPD) — R/W. Indicates the highest allowable speed of the interface. 
This speed is limited by the CAP.ISS (ABAR+00h: bit 23:20) field. 


Value Description 


Oh No speed negotiation restrictions 
1h Limit speed negotiation to Generation 1 communication rate 
2h Limit speed negotiation to Generation 2 communication rate 


ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates 
(3.0 Gb/s). 





is lh Transitions to the PARTIAL state disabled 
2h Transitions to the SLUMBER state disabled 
3h Transitions to both PARTIAL and SLUMBER states disabled 
All other values reserved 
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CD a ee 


Device Detection I nitialization (DET) — R/W. Controls the |CH9’s device detection 
and interface initialization. 


Value Description 


Oh No device detection or initialization action requested 


Perform interface communication initialization sequence to 
establish communication. This is functionally equivalent to a hard 
reset and results in the interface being reset and communications 
re-initialized 


1h 


4h Disable the Serial ATA interface and put Phy in offline mode 


All other values reserved. 

When this field is written to a 1h, the |CH9 initiates COMRESET and starts the 
initialization process. When the initialization is complete, this field shall remain 1h until 
set to another value by software. 

This field may only be changed to 1h or 4h when PxCMD.ST is 0. Changing this field 
while the |CH9 is running results in undefined behavior. 

Note: It is permissible to implement any of the Serial ATA defined behaviors for 
transmission of COMRESET when DET=1h. 





14.4.3.12 PxSERR—Port [5:0] Serial ATA Error Register (D31:F2) 


Address Offset: Port 0: ABAR + 130h Attribute: R/WC 
Port 1: ABAR + 1BOh 
Port 2: ABAR + 230h (Desktop Only) 
Port 3: ABAR + 2BOh (Desktop Only) 
Port 4: ABAR + 330h 
Port 5: ABAR + 3BOh 
Default Value: 00000000h Size: 32 bits 


Bits 26:16 of this register contains diagnostic error information for use by diagnostic software in 
validating correct operation or isolating failure modes. Bits 11:0 contain error information used by 
host software in determining the appropriate response to the error condition. If one or more of 
bits 11:8 of this register are set, the controller will stop the current transfer. 


eae ae 


Exchanged (X) — R/WC. When set to one this bit indicates that a change in device 
presence has been detected since the last time this bit was cleared. This bit shall 
always be set to 1 anytime a COMINIT signal is received. This bit is reflected in the 
POIS.PCS bit. 


Unrecognized FIS Type (F) — R/WC. Indicates that one or more FISs were received 
by the Transport layer with good CRC, but had a type field that was not recognized. 


the transition from one state to another within the Transport layer since the last time 
this bit was cleared. 


Transport state transition error (T) — R/WC. Indicates that an error has occurred in 
the transition from one state to another within the Transport layer since the last time 
this bit was cleared. 





pa Transport state transition error (T) — R/WC. Indicates that an error has occurred in 
24 
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Handshake (H) — R/WC. Indicates that one or more R_ERR handshake response was 
received in response to frame transmission. Such errors may be the result of a CRC 
error detected by the recipient, a disparity or 8b/10b decoding error, or other error 
condition leading to a negative handshake on a transmitted frame. 


CRC Error (C) — R/WC. Indicates that one or more CRC errors occurred with the Link 
Layer. 


Disparity Error (D) — R/WC. This field is not used by AHCI. 
19 10b to 8b Decode Error (B) — R/WC. Indicates that one or more 10b to 8b decoding 
errors occurred. 
18 Comm Wake (W) — R/WC. Indicates that a Comm Wake signal was detected by the 
Phy. 
i i 
11 
10 
7:2 
1 


Phy Internal Error (1) — R/WC. Indicates that the Phy detected some internal error. 


PhyRdy Change (N) — R/WC. When set to 1 this bit indicates that the internal PhyRdy 
signal changed state since the last time this bit was cleared. In the ICH9, this bit will be 
set when PhyRdy changes from a 0 -> 1 or a1 -> O. The state of this bit is then 
reflected in the PxIS.PRCS interrupt status bit and an interrupt will be generated if 
enabled. Software clears this bit by writing a 1 to it. 


Internal Error (E) — R/WC. The SATA controller failed due to a master or target abort 
when attempting to access system memory. 


Protocol Error (P) — R/WC. A violation of the Serial ATA protocol was detected. 
Note: The ICH9 does not set this bit for all protocol violations that may occur on the 
SATA link. 


device that has been removed or has failed, or a number of other causes. 


Transient Data Integrity Error (T) — R/WC. A data integrity error occurred that was 
not recovered by the interface. 


Recovered Communications Error (M) — R/WC. Communications between the 
device and host was temporarily lost but was re-established. This can arise from a 
device temporarily being removed, from a temporary loss of Phy synchronization, or 
from other causes and may be derived from the PhyNRdy signal between the Phy and 
Link layers. 


Recovered Data Integrity Error (1) — R/WC. A data integrity error occurred that 
was recovered by the interface through a retry operation or other recovery action. 


Persistent Communication or Data I ntegrity Error (C) — R/WC. A communication 
error that was not recovered occurred that is expected to be persistent. Persistent 
communications errors may arise from faulty interconnect with the device, from a 
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14.4.3.13 PxSACT—Port [5:0] Serial ATA Active (D31:F2) 


Address Offset: Port 0: ABAR + 134h Attribute: R/W 
Port 1: ABAR + 1B4h 
Port 2: ABAR + 234h (Desktop Only) 
Port 3: ABAR + 2B4h (Desktop Only) 
Port 4: ABAR + 334h 
Port 5: ABAR + 3B4h 
Default Value: 00000000h Size: 32 bits 


a 


Device Status (DS) — R/W. System software sets this bit for SATA queuing operations 
prior to setting the PxCI.Cl bit in the same command slot entry. This field is cleared via 


the Set Device Bits FIS. 


This field is also cleared when PxCMD.ST (ABAR+118h/198h/218h/298h: bit 0) is 
cleared by software, and as a result of a COMRESET or SRST. 





14.4.3.14 PxCl—Port [5:0] Command Issue Register (D31:F2) 


Address Offset: Port 0: ABAR + 138h Attribute: R/W 
Port 1: ABAR + 1B8h 
Port 2: ABAR + 238h (Desktop Only) 
Port 3: ABAR + 2B8h (Desktop Only) 
Port 4: ABAR + 338h 
Port 5: ABAR + 3B8h 
Default Value: 00000000h Size: 32 bits 


rare ae 


Commands Issued (CI) — R/W. This field is set by software to indicate to the ICH9 

that a command has been built-in system memory for a command slot and may be sent 
to the device. When the |CH9 receives a FIS which clears the BSY and DRQ bits for the 
command, it clears the corresponding bit in this register for that command slot. Bits in 


this field shall only be set to '1' by software when PxCMD.ST is set to '1'. 


This field is also cleared when PxCMD.ST (ABAR+118h/198h/218h/298h: bit 0) is 
cleared by software. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 603 


® 
| n tel SATA Controller Registers (D31:F2) 


604 Intel® |/O Controller Hub 9 (ICH9) Family Datasheet 


® 
SATA Controller Registers (D31:F5) [ n tel 


L5 


15.1 


Note: 


SATA Controller Registers 
(D31:F5) 


PCI Configuration Registers (SATA- D31:F5) 


Address locations that are not shown should be treated as Reserved. 


All of the SATA registers are in the core well. None of the registers can be locked. 


Table 15-1. SATA Controller PCI Register Address Map (SATA- D31:F5) (Sheet 1 of 2) 


[onset [enone [__egitermime [sats [ype 
0Oh-O1h Vendor Identification 8086h | = RO 


description 
04h- 05h PCICMD PCI Command 0000h R/W, RO 
O6h- 07h PCISTS PCI Status 02BOh R/WC, RO 


poh fmt dali ee ae iption PFO 
description 
See register See 
09h Programming Interface “gts register 
description vcs 
description 
See register Shu 
OAh SCC Sub Class Code iste register 
description rae 
description 


10h-13h PCMD_BAR | Primary Command Block Base Address 00000001h R/W, RO 


14h-17h PCNL_BAR_ | Primary Control Block Base Address 00000001h R/W, RO 


18h-1Bh | SCMD_BAR pei: Command: Bleek Bact 00000001h | R/W, RO 


1Ch-1Fh SCNL_BAR_ | Secondary Control Block Base Address 00000001h R/W, RO 
20h- 23h Legacy Bus Master Base Address 00000001h | R/W, RO 


' . See 

S4h-97h | Sipe. | Ca AMA index / Date Pair Base 00000000h_ | register 
Address ae 

description 


[exp [canaitesPoter «Tam [RO 


3 
3 
3 
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Table 15-1. SATA Controller PCI aol mage Address Map (SATA- D31:F5) (Sheet 2 of 2) 
ee 
description 


72h-73h | PC _| PCI Power Management Capabilities | PCI Power Management | PCI Power Management Capabilities | 4003h | RO 


PCI Power Management Control and R/W, RO, 
80h-81h MSICI Hes Signaled Interrupt Capability 7005h | Ro | 
82h-83h MSIMC Message Signaled Interrupt Message 0000h RO, R/W 

Control 
84h-87h MSIMA Message Signaled Interrupt Message 00000000h RO, R/W 

Address 
88h-89h MSIMD = Signaled Interrupt Message 0000h ar 


R/W, a 
92h-93h a Port Control and Status 0000h R/WC 


[aan-nah | Scaro [SAA Capa Revisor | 010802" [RO 
[ach-arh [ —scari [SATA Capaity Renisteri | 00000088 [RO 
Peon-bin [Anco [RIRGapapiiy To ——————~+|_—ooneh RO 
[san-ban | Fincw [FIR Cepabity Length andvawe [2006 [RO 


NOTE: The |CH9 SATA controller is not arbitrated as a PCI device, therefore it does not need a 
master latency timer. 





15.1.1 ViD—Vendor | dentification Register (SATA—D31:F5) 


Offset Address: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16 bit 
Lockable: No Power Well: Core 


Ce on 





Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h 
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15.1.2 DI D—Device Identification Register (SATA—D31:F5) 


Offset Address: O2h-03h Attribute: RO 
Default Value: See bit description Size: 16 bit 
Lockable: No Power Well: Core 


oe 


Device ID — RO. This is a 16-bit value assigned to the Intel® ICH9 SATA controller. 


NOTE: The value of this field will change dependent upon the value of the MAP 
Register. See Section 15.1.29 





15.1.3 PCI CMD—PCI Command Register (SATA- D31:F5) 


Address Offset: O4h-05h Attribute: RO, R/W 
Default Value: 0000h Size: 16 bits 


[a sete 
15:11 | Reserved 


Interrupt Disable — R/W. This disables pin-based INTx# interrupts. This bit has no 
effect on MSI operation. 


0 = Internal INTx# messages are generated if there is an interrupt and MSI is not 
enabled. 
1 = Internal INTx# messages will not be generated. 


Fast Back to Back Enable (FBE) — RO. Reserved as 0. 
SERR# Enable (SERR_EN) — RO. Reserved as 0. 
Wait Cycle Control (WCC) — RO. Reserved as 0. 


Parity Error Response (PER) — R/W. 
0 = Disabled. SATA controller will not generate PERR# when a data parity error is 
detected. 


g 1 = Enabled. SATA controller will generate PERR# when a data parity error is detected. 
VGA Palette Snoop (VPS) — RO. Reserved as 0. 

| 4 | Postable Memory Write Enable (PMWE) — RO. Reserved as 0. 

Special Cycle Enable (SCE) — RO. Reserved as 0. 


Bus Master Enable (BME) — R/W. This bit controls the ICH9’s ability to act as a PCI 
master for IDE Bus Master transfers. This bit does not impact the generation of 
completions for split transaction commands. 


Memory Space Enable (MSE) — RO. This controller does not support AHCI, therefore 
no memory space is required. 


1/ O Space Enable (1OSE) — R/W. This bit controls access to the I/O space registers. 

0 = Disables access to the Legacy or Native IDE ports (both Primary and Secondary) as 
well as the Bus Master I/O registers. 

1 = Enable. Note that the Base Address register for the Bus Master registers should be 
programmed before this bit is set. 
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15.1.4 PCISTS — PCI Status Register (SATA- D31:F5) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: O2BOh Size: 16 bits 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


Detected Parity Error (DPE) — R/WC. 


0 = No parity error detected by SATA controller. 
1 = SATA controller detects a parity error on its interface. 


Signaled System Error (SSE) — RO. Reserved as 0. 


Received Master Abort (RMA) — R/WC. 


0 = Master abort Not generated. 
1 = SATA controller, as a master, generated a master abort. 


Reserved 
Signaled Target Abort (STA) — RO. Reserved as 0. 


DEVSEL# Timing Status (DEV_STS) — RO. 
01 = Hardwired; Controls the device select time for the SATA controller’s PCI interface. 


Data Parity Error Detected (DPED) — R/WC. For ICH, this bit can only be set on 
read completions received from SiBUS where there is a parity error. 


1 = SATA controller, as a master, either detects a parity error or sees the parity error 
line asserted, and the parity error response bit (bit 6 of the command register) is 
set. 


Fast Back to Back Capable (FB2BC) — RO. Reserved as 1. 
User Definable Features (UDF) — RO. Reserved as 0. 
66MHz Capable (66MHZ_CAP) — RO. Reserved as 1. 


Capabilities List (CAP_LIST) — RO. This bit indicates the presence of a capabilities 
list. The minimum requirement for the capabilities list must be PC] power management 
for the SATA controller. 


Interrupt Status (INTS) — RO. Reflects the state of INTx# messages, 1RQ14 or 
IRQ15. 


0 = Interrupt is cleared (independent of the state of Interrupt Disable bit in the 
command register [offset 04h]). 
1 = Interrupt is to be asserted 


15.1.5 RI D—Revision Identification Register (SATA—D31:F5) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


a 





Revision ID — RO. Refer to the Intel® 1/O Controller Hub (ICH9) Family Specification 
Update for the value of the Revision ID Register 
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15.1.6 


15.1.7 


15.1.8 


Pl —Programming Interface Register (SATA- D31:F5) 


Address Offset: O9h Attribute: RO 
Default Value: 85h Size: 8 bits 


When SCC = O1h 


This read-only bit is a 1 to indicate that the I|CH9 supports bus master operation 


Reserved. 

Secondary Mode Native Capable (SNC) — RO. Indicates whether or not the 
secondary channel has a fixed mode of operation. 

0 = Indicates the mode is fixed and is determined by the (read-only) value of bit 2. 
This bit will always return ‘0’. 


Secondary Mode Native Enable (SNE) — RO. 


Determines the mode that the secondary channel is operating in. 
1 = Secondary controller operating in native PCI mode. 


This bit will always return ‘1’. 

Primary Mode Native Capable (PNC) — RO. Indicates whether or not the primary 
channel has a fixed mode of operation. 

0 = Indicates the mode is fixed and is determined by the (read-only) value of bit 0. 
This bit will always return ‘0’. 


Primary Mode Native Enable (PNE) — RO. 


Determines the mode that the primary channel is operating in. 
1 = Primary controller operating in native PCI mode. 


This bit will always return ‘1’. 





SCC—Sub Class Code Register (SATA- D31:F5) 


Address Offset: OAh Attribute: RO 
Default Value: Olh Size: 8 bits 


a 
7:0 Sub Class Code (SCC) — RO. 
; The value of this field determines whether the controller supports legacy IDE mode. 


BCC—Base Class Code Register (SATA- D31:F5) 


Address Offset: OBh Attribute: RO 
Default Value: O1h Size: 8 bits 


a 








7:0 Base Class Code (BCC) — RO. 
; 01h = Mass storage device 
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15.1.9 PMLT—Primary Master Latency Timer Register 
(SATA- D31:F5) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


a 


Master Latency Timer Count (MLTC) — RO. 


00h = Hardwired. The SATA controller is implemented internally, and is not arbitrated 
as a PCI device, so it does not need a Master Latency Timer. 





15.1.10 PCMD_BAR—Primary Command Block Base Address 
Register (SATA- D31:F5) 


Address Offset: 10h-13h Attribute: R/W, RO 
Default Value: 00000001h Size: 32 bits 


a 


31:16 | Reserved 


Base Address — R/W. This field provides the base address of the I/O space (8 


a consecutive I/O locations). 


2:1 Reserved 


So | Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


NOTE: This 8-byte I/O space is used in native mode for the Primary Controller’s Command Block. 





15.1.11 PCNL_BAR—Primary Control Block Base Address Register 


(SATA- D31:F5) 
Address Offset: 14h-17h Attribute: R/W, RO 
Default Value: o00000001h Size: 32 bits 


31:16 | Reserved 


a 


Base Address — R/W. This field provides the base address of the I1/O space (4 


1 Reserved 


Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


NOTE: This 4-byte I/O space is used in native mode for the Primary Controller’s Command Block. 





consecutive I/O locations). 
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15.1.12 SCMD_BAR—Secondary Command Block Base Address 
Register (IDE D31:F1) 


Address Offset: 18h-1Bh Attribute: R/W, RO 
Default Value: ©Q0000001h Size: 32 bits 


el eee 
31:16 | Reserved 


Base Address — R/W. This field provides the base address of the I1/O space (8 


consecutive I/O locations). 
2:1 Reserved 


po Resource Type I ndicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


NOTE: This 8-byte I/O space is used in native mode for the Secondary Controller's Command 
Block. 





15.1.13  SCNL_BAR—Secondary Control Block Base Address 
Register (IDE D31:F1) 


Address Offset: 1Ch-1Fh Attribute: R/W, RO 
Default Value: | Q00000001h Size: 32 bits 


Pe sino 


15:2 Base Address — R/W. This field provides the base address of the 1/O space (4 


consecutive I/O locations). 


EX Resource Type I ndicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


NOTE: This 4-byte I/O space is used in native mode for the Secondary Controller's Command 
Block. 
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15.1.14 BAR — Legacy Bus Master Base Address Register 


(SATA- D31:F5) 
Address Offset: 20h-23h Attribute: R/W, RO 
Default Value: 00000001h Size: 32 bits 


The Bus Master IDE interface function uses Base Address register 5 to request a 16- 
byte |O space to provide a software interface to the Bus Master functions. Only 12 
bytes are actually used (6 bytes for primary, 6 bytes for secondary). Only bits [15:4] 
are used to decode the address. 


a 
15:5 
3:1 


Base Address — R/W. This field provides the base address of the I/O space (16 
consecutive I/O locations). 

Base Address 4 (BA4) — R/W. 

When SCC is O1h, this bit will be R/W resulting in requesting 16B of I/O space. 


Reserved 


po Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for I/O 
space. 


15.1.15 SIDPBA — SATA I ndex/ Data Pair Base Address Register 





(SATA- D31:F5) 
Address Offset: 24h-27h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


When SCC is 01h 
When the programming interface is IDE, the register represents an I/O BAR allocating 


16B of |/O space for the |/O mapped registers defined in Section 15.4. Note that 
although 16B of locations are allocated, some maybe reserved. 


a 


1:16 | Reserved 


Base Address (BA) — R/W. Base address of register |/O space 


Ea Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate a request for |/O 
space. 
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15.1.16 SViD—Subsystem Vendor Identification Register 


(SATA- D31:F5) 

Address Offset: 2Ch-2Dh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Function Level Reset: No 


Description 


15:0 Subsystem Vendor ID (SVID) — R/WO. Value is written by BIOS. No hardware 
, action taken on this value. 


15.1.17 SID—Subsystem Identification Register (SATA- D31:F5) 





Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Description 


Subsystem ID (SID) — R/WO. Value is written by BIOS. No hardware action taken on 
, this value. 


15.1.18 CAP—Capabilities Pointer Register (SATA- D31:F5) 


Address Offset: 34h Attribute: RO 
Default Value: 70h Size: 8 bits 


a 


Capabilities Pointer (CAP_ PTR) — RO. Indicates that the first capability pointer 
offset is 70h if the Sub Class Code (SCC) (Dev 31:F2:0Ah) is configure as IDE mode 
(value of O1). 








15.1.19 INT_LN—Interrupt Line Register (SATA- D31:F5) 


Address Offset: 3Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Interrupt Line — R/W. This field is used to communicate to software the interrupt line 
that the interrupt pin is connected to. These bits are not reset by FLR. 





15.1.20 INT_PN—Interrupt Pin Register (SATA- D31:F5) 


Address Offset: 3Dh Attribute: RO 
Default Value: See Register Description Size: 8 bits 


Interrupt Pin — RO. This reflects the value of D31IP.SIP1 (Chipset Config 
Registers: Offset 3100h: bits 11:8). 
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15.1.21 


15.1.22 


15.1.23 


614 


IDE_TIM — IDE Timing Register (SATA- D31:F5) 


Address Offset: Primary: 40h-41h Attribute: R/W 
Secondary: 42h-43h 
Default Value: 0000h Size: 16 bits 


c.2 a 


IDE Decode Enable (IDE) — R/W. Individually enable/disable the Primary or 

Secondary decode. 

0 = Disable. 

1 = Enables the Intel® ICH9 to decode the associated Command Blocks (1FO-1F7h for 
primary, 170-177h for secondary) and Control Block (3F6h for primary and 376h 


for secondary). 
This bit effects the IDE decode ranges for both legacy and native-Mode decoding. 


NOTE: This bit affects SATA operation in both combined and non-combined ATA modes. 
See Section 5.16 for more on ATA modes of operation. 


P!ID—PCI Power Management Capability I dentification 
Register (SATA- D31:F5) 


Address Offset: 70h-71h Attribute: RO 
Default Value: BOO1h Size: 16 bits 


a 


Next Capability (NEXT) — RO. When SCC is 01h, this field will be BOh indicating the 
next item is FLR Capability Pointer in the list. 


Capability ID (CID) — RO. Indicates that this pointer is a PCI power management. 


PC—PCI Power Management Capabilities Register 
(SATA- D31:F5) 


Address Offset: 72h-73h Attribute: RO 
Default Value: 4003h Size: 16 bits 


| Bits | Description 


15:11 PME Support (PME_SUP) — RO. By default with SCC = O1h, the default value of 








00000 indicates no PME support in IDE mode. 


D2 Support (D2_SUP) — RO. Hardwired to 0. The D2 state is not supported 
D1 Support (D1_SUP) — RO. Hardwired to 0. The D1 state is not supported 


Auxiliary Current (AUX_CUR) — RO. PME# from D3c¢q,p state is not supported, 
therefore this field is O00b. 


| 5 | Device Specific Initialization (DSI) — RO. Hardwired to 0 to indicate that no device- 


specific initialization is required. 
Reserved 


PME Clock (PME_CLK) — RO. Hardwired to 0 to indicate that PCI clock is not required to 
generate PME#. 


| 2:0 | Version (VER) — RO. Hardwired to 011 to indicates support for Revision 1.2 of the PCI 


10 
5 
3 

2:0 


Power Management Specification. 
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15.1.24 PMCS—PCI Power Management Control and Status 


15.1.25 





Register (SATA- D31:F5) 


Address Offset: 74h-75h Attribute: RO, R/W, R/WC 
Default Value: 0O008h Size: 16 bits 
Function Level Reset: No (Bits 8 and 15 only) 


Cs 
PME Status (PMES) — R/WC. Bit is set when a PME event is to be requested, and if 
this bit and PMEE is set, a PME# will be generated from the SATA controller. 

15 Note: When SCC=Oth this bit will be RO ‘0’. Software is advised to clear PMEE together 


with PMES prior to changing SCC through MAP.SMS. 
This bit is not reset by Function Level Reset. 


Reserved 


PME Enable (PMEE) — R/W. When SCC is not 01h, this bit R/W. When set, the SATA 
controller generates PME# form D3yo7 On a wake event. 

Note: When SCC=0Oth this bit will be RO ‘0’. Software is advised to clear PMEE together 
with PMES prior to changing SCC through MAP.SMS. 


This bit is not reset by Function Level Reset. 


No Soft Reset (NSFRST) — RO. These bits are used to indicate whether devices 

transitioning from D3yo7 state to DO state will perform an internal reset. 

0 = Device transitioning from D3yo7 state to DO state perform an internal reset. 

1 = Device transitioning from D3yo7 state to DO state do not perform an internal reset. 
3 


Configuration content is preserved. Upon transition from the D3yo7 state to DO state 
initialized state, no additional operating system intervention is required to preserve 
configuration context beyond writing to the PowerState bits. 


Regardless of this bit, the controller transition from D3yo7 state to DO state by a system 
or bus segment reset will return to the state DO uninitialized with only PME context 
preserved if PME is supported and enabled. 


Power State (PS) — R/W. These bits are used both to determine the current power 
state of the 
SATA controller and to set a new power state. 
1:0 |00 =DO state 
11 = D3yor state 
When in the D3,,5, state, the controller’s configuration space is available, but the I/O 


and memory spaces are not. Additionally, interrupts are blocked. 


MI D—Message Signal I nterrupt | dentifier (SATA- D31:F5) 


Address Offset: 80h-81h Attribute: RO 
Default Value: 7005h Size: 16 bits 


| Bits | Description 


Next Pointer (NEXT) — RO. Indicates the next item in the list is the PCl Power 
Management Pointer. 


Capability 1D (CID)— RO. Capability 1D indicates Message Signal Interrupt. 


15:8 
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15.1.26 


15.1.27 


15.1.28 
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MC—Message Signal I nterrupt Message Control (SATA- 
D31:F5) 


Address Offset: 82h-83h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


ro 
64 Bit Address Capable (C64)— RO. Capable of generating a 32-bit message only. 


Multiple Message Enable (MME) — RO. This controller supports a single interrupt 
message. This bit is RO ‘0’. 


Multiple Message Capable (MMC) — RO. System software reads this field to 
3:1 | determine the number of requested vectors. This controller supports a single interrupt 
message, this field is RO ‘0’. 
MSI Enable (MSIE) — R/W. If set, MSI is enabled and traditional interrupt pins are not 
used to generate interrupts. 
Note: CMD.ID bit does not effect MSI. Software must clear this bit to 0 to disable MSI 
before changing the number of messages allocated in the MMC field. Software must also 
make sure this bit is cleared to ‘0’ when operating in legacy IDE mode. This bit is R/W 
when SCC is not O1h and is RO ‘0’ when SCC is O1h. 





MA—Message Signal Interrupt Message Address (SATA- 
D31:F5) 


Address Offset: 84h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


| Bits | Description 

. Address (ADDR) — R/W. Lower 32 bits of the system specified message address, 
31:2 d 
always DWORD aligned. 


Reserved. 


MD—Message Signal I nterrupt Message Data (SATA- 
D31:F5) 


Address Offset: 88h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


oe 


Data (DATA) — R/W. This 16-bit field is programmed by system software if MSI is 
enabled. Its content is driven onto the lower word of the data bus of the MSI memory 





write transaction. 


Note: When MC.MME field is set to a value other than ‘000’, some bits of the MSI 
memory write transaction will be driven based on the source of the interrupt rather than 
from MD[2: 0]. 
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15.1.29 MAP—Address Map Register (SATA- D31:F5)16 


Address Offset: 90h Attribute: R/W, R/WO, RO 
Default Value: OOh Size: bits 
Function Level Reset: No (Bits 9:8 only) 


fees Teeter 
15:10 | Reserved. 


Reserved 


pe SATA Mode Select (SMS) — R/W. Software programs these bits to control the mode in 
7:6 


which the SATA Controller should operate. 
00b = IDE Mode 
All other combinations are reserved. 


Map Value (MV)— Reserved. 
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15.1.30 PCS—Port Control and Status Register (SATA- D31:F5) 


Address Offset: 92h-93h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 
Function Level Reset: No 


By default, the SATA ports are set to the disabled state (bits [5:0] = ‘0’). When enabled 
by software, the ports can transition between the on, partial, and slumber states and 
can detect devices. When disabled, the port is in the “off” state and cannot detect any 
devices. 


If an AHCl-aware or RAID enabled operating system is being booted then system BIOS 
shall insure that all supported SATA ports are enabled prior to passing control to the 
OS. Once the AHCI aware OS is booted it becomes the enabling/disabling policy owner 
for the individual SATA ports. This is accomplished by manipulating a port’s PxSCTL and 
PxCMD fields. Because an AHCI or RAID aware OS will typically not have knowledge of 
the PxE bits and because the PxE bits act as master on/off switches for the ports, pre- 
boot software must insure that these bits are set to ‘1’ prior to booting the OS, 
regardless as to whether or not a device is currently on the port. 


Lo 


Port 5 Present (P5P) — RO. The status of this bit may change at any time. This bit is 
cleared when the port is disabled via P1E. This bit is not cleared upon surprise removal 
of a device. 

0 = No device detected. 

1 = The presence of a device on Port 1 has been detected. 


Port 4 Present (P4P) — RO. The status of this bit may change at any time. This bit is 
cleared when the port is disabled via POE. This bit is not cleared upon surprise removal 
of a device. 

0 = No device detected. 

1 = The presence of a device on Port 0 has been detected. 


Port 5 Enabled (P5E) — R/W. 
0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 
1 1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 
This bit is read-only ‘0’ when MAP.SPD[1]= 1. 


Port 4 Enabled (P4E) — R/W. 

0 = Disabled. The port is in the ‘off’ state and cannot detect any devices. 

1 = Enabled. The port can transition between the on, partial, and slumber states and 
can detect devices. 

This bit is read-only ‘0’ when MAP.SPD[0]= 1. 
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15.1.31 SATACRO— SATA Capability Register 0 (SATA- D31:F5) 
Address Offset: A8h-ABh Attribute: RO, RWO 
Default Value: 0010B012h Size: 32 bits 
Function Level Reset: No (Bits 15:8 only) 


Note: When SCC is O1h this register is read-only 0. 


a 
31:24 | Reserved. 


23:20 Major Revision (MAJ REV) — RO. Major revision number of the SATA Capability 


Pointer implemented. 


19:16 Minor Revision (MINREV) — RO. Minor revision number of the SATA Capability 
, Pointer implemented. 


7:0 Capability 1D (CAP) — RO. The value of 12h has been assigned by the PCI SIG to 
, designate the SATA capability pointer. 
15.1.32 SATACR1— SATA Capability Register 1 (SATA- D31:F5) 


Address Offset: ACh-AFh Attribute: RO 
Default Value: 00000048h Size: 32 bits 





When SCC is Oth this register is read-only 0. 


a 


BAR Offset (BAROFST) — RO. Indicates the offset into the BAR where the AHCI 
Index/Data pair are located (in DWord granularity). The index and Data I/O registers 


15:4 | are located at offset 10h within the I/O space defined by LBAR (BARA). A value of 004h 
indicates offset 10h. 
BAR Location (BARLOC) — RO. Indicates the absolute PCI Configuration Register 
3:0 address of the BAR containing the Index/Data pair (in DWord granularity). The Index 


and Data I/O registers reside within the space defined by LBAR (BAR4) in the SATA 
controller. a value of 8h indicates and offset of 20h, which is LBAR (BARA). 





15.1.33 FLRCID— FLR Capability 1D (SATA- D31:F5) 


Address Offset: BOh-B1ih Attribute: RO 
Default Value: 0009h Size: 16 bits 


a 


Next Capability Pointer — RO. A value of 00h indicates the final item in the Capability 
List. 


Capability ID — RO. The value of this field depends on the FLRCSSECL bit. 
If FLRCSSEL = 0, this field is 13h 
If FLRCSSEL = 1, this field is 09h, indicating vendor specific capability. 
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15.1.34 FLRCLV— FLR Capability Length and Value (SATA- D31:F5) 
Address Offset: B2h-B3h Attribute: RO, RWO 
Default Value: 2006h Size: 16 bits 
Function Level Reset: No (Bits 9:8 only) 


When FLRCSSEL = ‘0’, this register is defined as follows. 


eC ee 
= FLR Capability — RWO. This field indicates support for Function Level Reset. 


TXP Capability — RWO. This field indicates support for the Transactions Pending (TXP) 
bit. TXP must be supported if FLR is supported. 


Capability Length — RO. This field indicates the number of bytes of the Vendor 
Specific capability as required by the PCI spec. It has the value of 06h for FLR 
Capability. 





When FLRCSSEL = ‘1’, this register is defined as follows. 


Vendor Specific Capability 1D — RO. A value of 02h identifies this capability as a 
Function Level Reset. 


Capability Version — RO. This field indicates the version of the FLR capability. 


Capability Length — RO. This field indicates the number of bytes of the Vendor 
Specific capability as required by the PCI spec. It has the value of 06h for FLR 
Capability. 





15.1.35 FLRCTRL— FLR Control (SATA- D31:F5) 


Address Offset: B4h-B5h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


p15:9 [Reserved 
a Transactions Pending (TXP) — RO. 


0 = Completions for all Non-Posted requests have been received by the controller. 
1 = Controller has issued Non-Posted request which has not been completed. 


Initiate FLR — R/W. Used to initiate FLR transition. A write of ‘1’ indicates FLR 
transition. 
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15.1.36 ATC—APM Trapping Control Register (SATA- D31:F5) 


Address Offset: COh Attribute: R/W 
Default Value: O0Oh Size: 8 bits 
Note: This SATA controller does not support legacy I/O access. Therefore, this register is 


reserved. Software shall not change the default values of the register; otherwise the 
result will be undefined. 


a ees 





Reserved 


15.1.37 ATC—APM Trapping Control (SATA- D31:F5) 


Address Offset: C4h Attribute: R/WC 
Default Value: O0Oh Size: 8 bits 
Note: This SATA controller does not support legacy |/O access. Therefore, this register is 


reserved. Software shall not change the default values of the register; otherwise the 
result will be undefined. 


rr ae 
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15.2 Bus Master IDE I/ O Registers (D31:F5) 


The bus master IDE function uses 16 bytes of I/O space, allocated via the BAR register, 
located in Device 31: Function 2 Configuration space, offset 20h. All bus master IDE I/O 
space registers can be accessed as byte, word, or dword quantities. Reading reserved 
bits returns an indeterminate, inconsistent value, and writes to reserved bits have no 
affect (but should not be attempted). These registers are only used for legacy 
operation. Software must not use these registers when running AHCI. The description 
of the I/O registers is shown in Table 15-2. 


Table 15-2. Bus Master IDE I/O Register Address Map 


BAR+ - 


BMICP Command Register Primary 00h R/W 
m [= [Reeves Cd TO 


0 BMISP Bus Master IDE Status Register Primary 00h ve as 


[= [reeves 80 


04-07 BMIDP ea IDE Descriptor Table Pointer R/W 


BMICS Command Register Secondary 00h R/W 
p= Reseved 


OAh BMISS Bus Master IDE Status Register Secondary 00h We Me 


OCh-OFh BMIDS Bus Master IDE Descriptor Table Pointer R/W 
Secondary 
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15.2.1 BMIC[P,S]—Bus Master IDE Command Register (D31:F5) 


Address Offset: Primary: BAR + 00h Attribute: R/W 
Secondary: BAR + 08h 
Default Value: OOh Size: 8 bits 


oe eerie 
Reserved. 
Read / Write Control (R/ WC) — R/W. This bit sets the direction of the bus master 
3 transfer: This bit must NOT be changed when the bus master function is active. 
0 = Memory reads 
1 = Memory writes 
2:1 Reserved. 
Start/ Stop Bus Master (START) — R/W. 


0 = All state information is lost when this bit is cleared. Master mode operation cannot 
be stopped and then resumed. If this bit is reset while bus master operation is still 
active (i.e., the Bus Master IDE Active bit (D31:F5:BAR + 02h, bit 0) of the Bus 
Master IDE Status register for that IDE channel is set) and the drive has not yet 
finished its data transfer (the Interrupt bit in the Bus Master IDE Status register for 


that IDE channel is not set), the bus master command is said to be aborted and 
data transferred from the drive may be discarded instead of being written to 
system memory. 

Enables bus master operation of the controller. Bus master operation does not 
actually start unless the Bus Master Enable bit (D31:F1:04h, bit 2) in PCI 
configuration space is also set. Bus master operation begins when this bit is 
detected changing from 0 to 1. The controller will transfer data between the IDE 
device and memory only when this bit is set. Master operation can be halted by 
writing a 0 to this bit. 


NOTE: This bit is intended to be cleared by software after the data transfer is 
completed, as indicated by either the Bus Master IDE Active bit being cleared or 
the Interrupt bit of the Bus Master IDE Status register for that IDE channel 
being set, or both. Hardware does not clear this bit automatically. If this bit is 
cleared to O prior to the DMA data transfer being initiated by the drive ina 
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BMIS[P,S]—Bus Master I DE Status Register (D31:F5) 


Address Offset: Primary: BAR + 02h Attribute: R/W, R/WC, RO 
Secondary: BAR + OAh 
Default Value: OOh Size: 8 bits 


a 


PRD Interrupt Status (PRDIS) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = This bit is set when the host controller execution of a PRD that has its PRD_INT bit 
set. 


| 6 | Reserved. 


Drive 0 DMA Capable — R/W. 

0 = Not Capable 

1 = Capable. Set by device dependent code (BIOS or device driver) to indicate that 
drive O for this channel is capable of DMA transfers, and that the controller has 
been initialized for optimum performance. The |CH9 does not use this bit. It is 
intended for systems that do not attach BMIDE to the PCI bus. 


Interrupt — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = Set when a device FIS is received with the ‘I’ bit set, provided that software has not 
disabled interrupts via the IEN bit of the Device Control Register (see chapter 5 of 
the Serial ATA Specification, Revision 1.0a). 


Error — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = This bit is set when the controller encounters a target abort or master abort when 
transferring data on PCI. 


Bus Master | DE Active (ACT) — RO. 

0 = This bit is cleared by the ICH9 when the last transfer for a region is performed, 
where EOT for that region is set in the region descriptor. It is also cleared by the 
ICH9 when the Start Bus Master bit (D31:F5:BAR+ 00h, bit 0) is cleared in the 
Command register. When this bit is read as a 0, all data transferred from the drive 
during the previous bus master command is visible in system memory, unless the 
bus master command was aborted. 

1 = Set by the ICH9 when the Start bit is written to the Command register. 


BMI D[P,S]—Bus Master IDE Descriptor Table Pointer 
Register (D31:F5) 


Address Offset: Primary: BAR + 04h-07h_ Attribute: R/W 
Secondary: BAR + OCh-OFh 
Default Value: — All bits undefined Size: 32 bits 


Pe scion 


Address of Descriptor Table (ADDR) — R/W. The bits in this field correspond to bits 
[31:2] of the memory location of the Physical Region Descriptor (PRD). The Descriptor 


Table must be dword-aligned. The Descriptor Table must not cross a 64-K boundary in 
memory. 


mu 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


| | ® 
SATA Controller Registers (D31:F5) | n tel ) 


15:3 


Table 15-3. 


15.3.1 


15.3.2 


AHCI Index Data Pair Registers 


These registers are only available if SCC is not 01h to index into all memory registers 
defined in Table 15-2 and the message buffer used for enclosure management. If SCC 
is O1h, these AHCI Index Data Pair registers are not accessible and SINDEX/SDATA 
register pair shall be used to index into a subset of the memory registers defined in 
Section 15.4. 


AHCI Index Data Pair Register Map 


I NDEX—AHCI Index Register (D31:F5) 


Address Offset: 10h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


a 


Index (I NDEX)— R/W. This Index field is used to select the Dword offset of the 
Memory Mapped AHCI register to be accessed. A Dword, Word or Byte access is 
specified by the active byte enables of the I/O access to the data register. 


Data—AHClI Data Register (D31:F5) 


Address Offset: 14h Attribute: R/W 
Default Value: | See Description. Size: 32 bits 


Pe bt 


Index (INDEX) — R/W. This Data register is a ‘window’ through which data is read or 
written to the memory mapped register pointed to by the Index register. Note that a 








physical register is not actually implemented as the data is actually stored in the 
memory mapped registers. Since this not a physical register, the ‘default’ value is the 
same as the default value of the register pointed to by index. 
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15.4.1 


Note: 


15.4.2 


Note: 


626 


Serial ATA Index/ Data Pair Superset Registers 


All of these I/O registers are in the core well. They are exposed only when SCC is O1h 
(i.e. IDE programming interface) and the controller is not in combined mode. These are 
Index/Data Pair registers that are used to access the SerialATA superset registers 
(SerialATA Status, SerialATA Control and SerialATA Error). The I/O space for these 
registers is allocated through SIDPBA. Locations with offset from 08h to OFh are 
reserved for future expansion. Software-write operations to the reserved locations shall 
have no effect while software-read operations to the reserved locations shall return 0. 


SINDX—SATA Index Register (D31:F5) 


Address Offset: SIDPBA + 00h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


These are Index/Data Pair Registers that are used to access the SSTS, SCTL, and 
SERR. The I/O space for these registers is allocated through SIDPBA. 


a 


Port Index (PI DX)— R/W: This Index field is used to specify the port of the SATA 
controller at which the port-specific SSTS, SCTL, and SERR registers are located. 


15:8 | 00h = Primary Master (Port 4) 

02h = Secondary Master (Port 5) 

All other values are Reserved. 

Register Index (RI DX)— R/W: This Index field is used to specify one out of three 
registers currently being indexed into. 

00h = SSTS 

7:0 

O1lh = SCTL 

02h = SERR 

All other values are Reserved 





SDATA—SATA I ndex Data Register (D31:F5) 


Address Offset: SIDPBA + 04h Attribute: R/W 
Default Value: All bits undefined Size: 32 bits 


These are Index/Data Pair Registers that are used to access the SSTS, SCTL, and 
SERR. The I/O space for these registers is allocated through SIDPBA. 


a 


Data (DATA) — R/W: This Data register is a “window” through which data is read or 
written to the memory mapped registers. A read or write to this Data register triggers a 
corresponding read or write to the memory mapped register pointed to by the Index 
register. The Index register must be setup prior to the read or write to this Data 


register. 

Note that a physical register is not actually implemented as the data is actually stored 
in the memory mapped registers. 

Since this is not a physical register, the “default” value is the same as the default value 
of the register pointed to by Index. 
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15.4.2.1 


PxSSTS—Serial ATA Status Register (D31:F5) 


Address Offset: Attribute: RO 
Default Value: 00000000h Size: 32 bits 


SDATA when SINDX.RIDX is 00h. This is a 32-bit register that conveys the current state 
of the interface and host. The |CH9 updates it continuously and asynchronously. When 
the |CH9 transmits a COMRESET to the device, this register is updated to its reset 
values. 


a 
31:12 | Reserved 


Interface Power Management (IPM) — RO. Indicates the current interface state: 
Value Description 
Oh Device not present or communication not established 
1h Interface in active state 
2h Interface in PARTIAL power management state 


6h Interface in SLUMBER power management state 


All other values reserved. 


(3.0 Gb/s). 


Device Detection (DET) — RO. Indicates the interface device detection and Phy 
state: 


Value Description 
Oh No device detected and Phy communication not established 
1h Device presence detected but Phy communication not established 
3h Device presence detected and Phy communication established 


Phy in offline mode as a result of the interface being disabled or 


si running in a BIST loopback mode 


Current Interface Speed (SPD) — RO. Indicates the negotiated interface 
communication speed. 
Value Description 
Oh Device not present or communication not established 
7:4 1h Generation 1 communication rate negotiated 
2h Generation 2 communication rate negotiated 
All other values reserved. 
ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates 


All other values reserved. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 627 


intel 


15.4.2.2 


628 


SATA Controller Registers (D31:F5) 


PxSCTL — Serial ATA Control Register (D31:F5) 


Address Offset: Attribute: R/W, RO 
Default Value: 00000004h Size: 32 bits 


SDATA when SINDX.RIDX is OLh. This is a 32-bit read-write register by which software 
controls SATA capabilities. Writes to the SControl register result in an action being 
taken by the |CH9 or the interface. Reads from the register return the last value written 
to it. 


a 


Interface Power Management Transitions Allowed (1PM) — R/W. Indicates which 
power states the ICH9 is allowed to transition to: 


Value Description 
Oh No interface restrictions 
1h Transitions to the PARTIAL state disabled 
2h Transitions to the SLUMBER state disabled 
3h Transitions to both PARTIAL and SLUMBER states disabled 


1 


All other values reserved 


; Speed Allowed (SPD) — R/W. Indicates the highest allowable speed of the interface. 


This speed is limited by the CAP.ISS (ABAR+00h: bit 23:20) field. 
Value Description 


Oh No speed negotiation restrictions 
1h Limit speed negotiation to Generation 1 communication rate 


2h Limit speed negotiation to Generation 2 communication rate 


All other values reserved. 


ICH9 Supports Generation 1 communication rates (1.5 Gb/s) and Gen 2 rates 
(3.0 Gb/s). 


Device Detection Initialization (DET) — R/W. Controls the ICH9’s device detection 
and interface initialization. 
Value Description 
Oh No device detection or initialization action requested 
Perform interface communication initialization sequence to 
establish communication. This is functionally equivalent to a hard 
1h : : : ws 
reset and results in the interface being reset and communications 
re-initialized 
4h Disable the Serial ATA interface and put Phy in offline mode 
All other values reserved. 


1:8 
7:4 
3:0 


When this field is written to a 1h, the |CH9 initiates COMRESET and starts the 
initialization process. When the initialization is complete, this field shall remain 1h until 
set to another value by software. 

This field may only be changed to 1h or 4h when PxCMD.ST is 0. Changing this field 
while the ICH9 is running results in undefined behavior. 
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15.4.2.3 


PxSERR—Serial ATA Error Register (D31:F5) 


Address Offset: Attribute: R/WC 
Default Value: 00000000h Size: 32 bits 


SDATA when SINDx.RIDX is 02h. 

Bits 26:16 of this register contains diagnostic error information for use by diagnostic software in 
validating correct operation or isolating failure modes. Bits 11:0 contain error information used by 
host software in determining the appropriate response to the error condition. If one or more of 
bits 11:8 of this register are set, the controller will stop the current transfer. 


Ss 
31:27 | Reserved 

26 

25 

24 

23 

22 

21 

20 

19 

18 

17 

16 

11 

10 


Exchanged (X) — R/WC. When set to one this bit indicates that a change in device 
presence has been detected since the last time this bit was cleared. This bit shall 
always be set to 1 anytime a COMINIT signal is received. This bit is reflected in the 
POIS.PCS bit. 


Unrecognized FIS Type (F) — R/WC. Indicates that one or more FISs were received 
by the Transport layer with good CRC, but had a type field that was not recognized. 


Transport state transition error (T) — R/WC. Indicates that an error has occurred in 
the transition 

from one state to another within the Transport layer since the last time this bit was 
cleared. 


Transport state transition error (T) — R/WC. Indicates that an error has occurred in 
the transition from one state to another within the Transport layer since the last time 
this bit was cleared. 


condition leading to a negative handshake on a transmitted frame. 


CRC Error (C) — R/WC. Indicates that one or more CRC errors occurred with the Link 
Layer. 


Disparity Error (D) — R/WC. This field is not used by AHCI. 


10b to 8b Decode Error (B) — R/WC. Indicates that one or more 10b to 8b decoding 
errors occurred. 


Comm Wake (W) — R/WC. Indicates that a Comm Wake signal was detected by the 
Phy. 


Phy Internal Error (1) — R/WC. Indicates that the Phy detected some internal error. 


PhyRdy Change (N) — R/WC. When set to 1 this bit indicates that the internal PhyRdy 
signal changed state since the last time this bit was cleared. In the |CH9, this bit will be 
set when PhyRdy changes from a0 -> 1 or al -> 0. The state of this bit is then 
reflected in the PxIS.PRCS interrupt status bit and an interrupt will be generated if 
enabled. Software clears this bit by writing a 1 to it. 


pa | Internal Error (E) — R/WC. The SATA controller failed due to a master or target abort 


Handshake (H) — R/WC. Indicates that one or more R_ERR handshake response was 
received in response to frame transmission. Such errors may be the result of a CRC 
error detected by the recipient, a disparity or 8b/10b decoding error, or other error 


when attempting to access system memory. 


Note: The ICH9 does not set this bit for all protocol violations that may occur on the 
SATA link. 





pe Protocol Error (P) — R/WC. A violation of the Serial ATA protocol was detected. 
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Persistent Communication or Data I ntegrity Error (C) — R/WC. A communication 
error that was not recovered occurred that is expected to be persistent. Persistent 
communications errors may arise from faulty interconnect with the device, from a 
device that has been removed or has failed, or a number of other causes. 


Transient Data Integrity Error (T) — R/WC. A data integrity error occurred that was 
not recovered by the interface. 


Recovered Communications Error (M) — R/WC. Communications between the 
device and host was temporarily lost but was re-established. This can arise from a 
device temporarily being removed, from a temporary loss of Phy synchronization, or 
from other causes and may be derived from the PhyNRdy signal between the Phy and 
Link layers. 


Recovered Data Integrity Error (1) — R/WC. A data integrity error occurred that 
was recovered by the interface through a retry operation or other recovery action. 


§ §§ 
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16.1 


Note: 


Table 16-1. 


Note: 


Table 16-2. 


UHCI Controllers Registers 


PCI Configuration Registers 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 
The USB functions may be hidden based on the value of the corresponding bits in the 


Function Disable Register (see Chipset Configuration Registers). UHCIs must be 
disabled from highest number to lowest within their specific PCI device. 


UHCI Controller PCI Configuration Map 


PCI 


Purcras [ease [SSCS 
Puree [ease OSS 
Purcras [esr 


Register address locations that are not shown in Table 16-2 should be treated as 
Reserved (see Section 9.2 for details). 





UHCI Controller PCI Register Address Map (USB—D29:F0/ F1/ F2/ F3, D26:FO/ 
F1/ F2) 


‘ UHCI #1-6 
onset | tmemonic | neststerntame | “era | TPE 


00-O1h VID Vendor Identification 8086h | = RO 


description 
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Table 16-2. UHCI Controller PCI Register Address Map (USB—D29:F0O/ F1/ F2/ F3, D26:FO/ 


j UHCI #1-6 
| Mnemonic | Register Name Default 


3Dh INT_PN Interrupt Pin see Tegister 
= description 
FLRNCP FLR Next Capability Pointer 


52-53h FLRCLV FLR Capability Length and Version 


F1/ F2) 


FLRCTRL FLR Control 


FLRSTAT FLR Status 
USB_RELNUM | Serial Bus Release Number | 10h 


Co-Cih | USB LEGKEY USB Legacy Keyboard/Mouse 
= Control 


0 
USB_RES | USB Resume Enable 
UCR1 UHCI Configuration Register 1 


NOTE: Refer to the Intel® ICH9 Family EDS Specification Update for the value of the Revision ID 
Register 





16.1.1 ViD—Vendor Identification Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: OOh-O1h Attribute: RO 
Default Value: 8086h Size: 16 bits 


a 
Vendor 1D — RO. This is a 16-bit value assigned to Intel 


16.1.2 DI D—Device Identification Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: O2h-03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


a 


Device 1D — RO. This is a 16-bit value assigned to the Intel® ICH9 USB universal host 





controllers. Refer to the Intel® I/O Controller Hub (ICH9) Family Specification Update 
for the value of the Device ID Register. 
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16.1.3 


PCI CMD—PCI Command Register (USB—D29:FO/ F1/ F2/ 
F3, D26:FO/ F1/ F2) 


Address Offset: O4h-O05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


ei eee 
15:11 | Reserved 


Interrupt Disable — R/W. 
0 = Enable. The function is able to generate its interrupt to the interrupt controller. 


1 = Disable. The function is not capable of generating interrupts. 
The corresponding Interrupt Status bit is not affected by the interrupt enable. 


Fast Back to Back Enable (FBE) — RO. Hardwired to 0. 
SERR# Enable — RO. Reserved as 0. 

Wait Cycle Control (WCC) — RO. Hardwired to 0. 
Parity Error Response (PER) — RO. Hardwired to 0. 
VGA Palette Snoop (VPS) — RO. Hardwired to 0. 


Special Cycle Enable (SCE) — RO. Hardwired to 0. 


Bus Master Enable (BME) — R/W. 
0 = Disable 
1 = Enable. |CH9 can act as a master on the PCI bus for USB transfers. 


Memory Space Enable (MSE) — RO. Hardwired to 0. 


1/ O Space Enable (1OSE) — R/W. This bit controls access to the I/O space registers. 

0 = Disable 

1 = Enable accesses to the USB I/O registers. The Base Address register for USB should 
be programmed before this bit is set. 





sare 
ZZ 
| 7 | 
zw 
| 4 | Postable Memory Write Enable (PMWE) — RO. Hardwired to 0. 
fed 
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16.1.4 PCISTS—PCI Status Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: 0290h Size: 16 bits 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


a 


Detected Parity Error (DPE) — R/WC. 


0 = No parity error detected. 
1 = Set when a data parity error data parity error is detected on writes to the UHCI 
register space or on read completions returned to the host controller. 


Received Master Abort (RMA) — R/WC. 
13 0 = No master abort generated by USB. 
1 = USB, as a master, generated a master abort. 


Signaled Target Abort (STA) — R/WC. 


0 = 1CH9 did Not terminate transaction for USB function with a target abort. 
1 = USB function is targeted with a transaction that the |CH9 terminates with a target 


DEVSEL# Timing Status (DEV_STS) — RO. This 2-bit field defines the timing for 


DEVSEL# assertion. These read only bits indicate the |CH9's DEVSEL# timing when 
performing a positive decode. |CH9 generates DEVSEL# with medium timing for USB. 


Data Parity Error Detected (DPED) — RO. Hardwired to 0. 
Fast Back to Back Capable (FB2BC) — RO. Hardwired to 1. 
User Definable Features (UDF) — RO. Hardwired to 0. 

66 MHz Capable — RO. Hardwired to 0. 


Capabilities List — RO. Hardwired to 1. Indicates that offset 34h contains a valid 
capabilities pointer. 

Interrupt Status — RO. This bit reflects the state of this function’s interrupt at the 
input of the enable/disable logic. 


0 = Interrupt is deasserted. 
1 = Interrupt is asserted. 


The value reported in this bit is independent of the value in the Interrupt Enable bit. 


16.1.5 RI D—Revision I dentification Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 





Description 


Revision |D — RO. Refer to the Intel® 1/O Controller Hub (1CH9) Family Specification 
Update for the value of the Revision ID Register 


7:0 
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16.1.6 PI —Programming Interface Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 09h Attribute: RO 
Default Value: 00h Size: 8 bits 


} Bit | Description 





7:0 Programming Interface — RO. 
: 00h = No specific register level programming interface defined. 


16.1.7 SCC—Sub Class Code Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: OAh Attribute: RO 
Default Value: 03h Size: 8 bits 


| Bit | Description 


70 Sub Class Code (SCC) — RO. 
‘ 03h = USB host controller. 





16.1.8 BCC—Base Class Code Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: OBh Attribute: RO 
Default Value: O0Ch Size: 8 bits 


| Bit | Description 
Base Class Code (BCC) — RO. 
OCh = Serial Bus controller. 
16.1.9 MLT—Master Latency Timer Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


on 


Master Latency Timer (MLT) — RO. The USB controller is implemented internal to the 





ICH9 and not arbitrated as a PCI device. Therefore the device does not require a 
Master Latency Timer. 
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16.1.10 HEADTYP—Header Type Register 


16.1.11 


16.1.12 


636 


(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: OEh Attribute: RO 
Default Value: See Bit Description Size: 8 bits 


For UHCI #2, 3, 5 and 6 this register is hardwired to 00h. For UHCI #1 and UHCI #4, 
bit 7 is determined by the values in the USB Function Disable bits (11:8 of the Function 
Disable register Chipset Config Registers: Offset 3418h). 


Re 2 ee 


Multi-Function Device — RO. Since the upper functions in this device can be 
individually hidden, this bit is based on the function- disable bits in Chipset Config 
Space: Offset 3418h as follows: 


0 = Single-function device. (Default for UHCI #2, 3, 5 and 6) 
1 = Multi-function device. (Default for UHCI #1 and 4) 


| 6:0 | Configuration Layout. Hardwired to 00h, which indicates the standard PCI configuration 
layout. 


BASE—Base Address Register 
(USB—D29:F0O/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 20h-23h Attribute: R/W, RO 
Default Value: | 00000001h Size: 32 bits 


foe eset 
31:16 | Reserved 


Base Address — R/W. Bits [15:5] correspond to I/O address signals AD [15:5], 
respectively. This gives 32 bytes of relocatable I/O space. 


Reserved 





Resource Type Indicator (RTE) — RO. Hardwired to 1 to indicate that the base address 
field in this register maps to I/O space. 





SVID — Subsystem Vendor Identification Register 
(USB—D29:F0O/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 2Ch-2Dh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Function Level Reset: No 


a 


Subsystem Vendor ID (SVID) — R/WO. BIOS sets the value in this register to 
identify the Subsystem Vendor ID. The USB_SVID register, in combination with the USB 
Subsystem ID register, enables the operating system to distinguish each subsystem 
from the others. 


NOTE: The software can write to this register only once per core well reset. Writes 
should be done as a single, 16-bit cycle. 
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16.1.13 SID — Subsystem Identification Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


Function Level Reset: No 


a 


Subsystem ID (SID) — R/WO. BIOS sets the value in this register to identify the 
Subsystem ID. The SID register, in combination with the SVID register (D29:FO/F1/F2/ 
F3, D26:FO/F1/F2:2C), enables the operating system to distinguish each subsystem 


from other(s). The value read in this register is the same as what was written to the 
IDE_SID register. 


NOTE: The software can write to this register only once per core well reset. Writes 
should be done as a single, 16-bit cycle. 





16.1.14 CAP_PTR—Capabilities Pointer 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 
Address Offset: 34h Attribute: R/WO 


Default Value: 50h Size: 8 bits 
Function Level Reset: No 


a 


Capability Pointer (CAP_PTR) — R/WO. This register points to the next capability in 
the Function Level Reset capability structure. 





16.1.15 INT_LN—Interrupt Line Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 3Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


a 


Interrupt Line (INT_LN) — RO. This data is not used by the ICH9. It is to 
communicate to software the interrupt line that the interrupt pin is connected to. 
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16.1.16 INT_PN—Interrupt Pin Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 3Dh Attribute: RO 
Default Value: See Description Size: 8 bits 


a 


Interrupt Line (INT_LN) — RO. This value tells the software which interrupt pin each 
USB host controller uses. The upper 4 bits are hardwired to 0000b; the lower 4 bits are 
determine by the Interrupt Pin default values that are programmed in the memory- 
mapped configuration space as follows: 


UHCI #1 - D29IP.UOP (Chipset Config Registers: Offset 3108: bits 3:0) 


UHCI #2 - D29IP.U1P (Chipset Config Registers: Offset 3108: bits 7:4) 


( 
UHCI #3 - D29I1P.U2P (Chipset Config Registers: Offset 3108: bits 11:8) 
UHCI #4 - D26IP.UOP (Chipset Config Registers: Offset 3114: bits 3:0) 
UHCI #5 - D26IP.U1P (Chipset Config Registers: Offset 3114: bits 7:4) 
UHCI #6 - D26IP.U2P (Chipset Config Registers: Offset 3114: bits 11:8) 
or 
UHCI #6 - D29I1P.U3P (Chipset Config Registers: Offset 3108: bits 15:12) 





NOTE: This does not determine the mapping to the PIRQ pins. 


16.1.17 FLRCID—Function Level Reset Capability ID 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 50h Attribute: RO 
Default Value: 09h Size: 8 bits 


a 


Capability 1D — RO. 
13h = If FLRCSSEL = 0 
09h (Vendor Specific Capability) = If FLRCSSEL = 1 





16.1.18 FLRNCP—Function Level Reset Next Capability Pointer 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 51h Attribute: RO 
Default Value: 00h Size: 8 bits 


a 





A value of 00h indicates that this is the last capability field. 
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16.1.19 


16.1.20 


FLRCLV—Function Level Reset Capability Length and 
Version 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 52h-53h Attribute: RO, R/WO 
Default Value: 2006h Size: 16 bits 


When FLRCSSEL = ‘0’, this register is defined as follows: 


os 
15:10 | Reserved. 


FLR Capability — R/WO. 
1 = Support for Function Level Reset (FLR). 


TXP Capability — R/WO. 
1 = Support for Transactions Pending (TXP) bit. TXP must be supported if FLR is 
supported. 


Capability Length — RO. This field indicates the # of bytes of this Vendor Specific 
capability as required by the PCI specification. It ha‘s the value of 06h for the FLR 
Capability. 


Vendor Specific Capability |D — RO. A value of 02h in this field identifies this 
capability a‘s Function Level Reset. 


Capability Version — RO. This field indicates the version of the FLR capability. 


Capability Length — RO. This field indicates the # of bytes of this Vendor Specific 
capability as required by the PCI specification. It ha‘s the value of 06h for the FLR 
Capability. 





USB_FLRCTRL—FLR Control Register 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 54h Attribute: R/W 
Default Value: 00h Size: 8 bits 


Initiate FLR— R/W. Used to initiate FLR transition. a write of ‘1’ initiates FLR transition. 
Since hardware must not respond to any cycles until FLR completion, the value read by 
software from this bit i always ‘0’. 
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16.1.21 


16.1.22 


16.1.23 
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USB_FLRSTAT—FLR Status Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 55h Attribute: RO 
Default Value: 00h Size: 8 bits 


a 
= 


Transaction Pending (TXP)— RO. 

0 = Indicates completions for all Non-Posted requests have been received. 

1 = Indicates the controller has issued Non-Posted request which have not been 
completed. 





USB_RELNUM—Serial Bus Release Number Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: 60h Attribute: RO 
Default Value: 10h Size: 8 bits 


a 
10h = USB controller supports the USB Specification, Release 1.0. 

USB_LEGKEY—USB Legacy Keyboard/ Mouse Control 

Register (USB—D29:F0O/ F1/ F2/ F3, D26:FO/ F1/ F2) 

Address Offset: COh-Clh Attribute: R/W, R/WC, RO 


Default Value: 2000h Size: 16 bits 
Function Level Reset: No 





This register is implemented separately in each of the USB UHCI functions. However, 
the enable and status bits for the trapping logic are OR’d and shared, respectively, 
since their functionality is not specific to any one host controller. 


a 


SMI Caused by End of Pass-Through (SMIBYENDPS) — R/WC. This bit indicates if 
the event occurred. Note that even if the corresponding enable bit is not set in bit 7, 
then this bit will still be active. It is up to the SMM code to use the enable bit to 
determine the exact cause of the SMI#. 

0 = Software clears this bit by writing a 1 to the bit location in any of the controllers. 
1 = Event Occurred 


PCI Interrupt Enable (USBPIRQEN) — R/W. This bit is used to prevent the USB 
controller from generating an interrupt due to transactions on its ports. Note that, when 
disabled, it will probably be configured to generate an SMI using bit 4 of this register. 
Default to 1 for compatibility with older USB software. 

0 = Disable 

1 = Enable 
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SMI Caused by USB Interrupt (SMIBYUSB) — RO. This bit indicates if an interrupt 

event occurred from this controller. The interrupt from the controller is taken before the 

enable in bit 13 has any effect to create this read-only bit. Note that even if the 

corresponding enable bit is not set in Bit 4, this bit may still be active. It is up to the 

SMM code to use the enable bit to determine the exact cause of the SMI#. 

0 = Software should clear the interrupts via the USB controllers. Writing a 1 to this bit 
will have no effect. 

1 = Event Occurred. 


SMI Caused by Port 64 Write (TRAPBY64W) — R/WC. This bit indicates if the event 
occurred. Note that even if the corresponding enable bit is not set in bit 3, this bit will 
still be active. It is up to the SMM code to use the enable bit to determine the exact 
cause of the SMI#. Note that the A20Gate Pass-Through Logic allows specific port 64h 
writes to complete without setting this bit. 

0 = Software clears this bit by writing a 1 to the bit location in any of the controllers. 
1 = Event Occurred. 


SMI Caused by Port 64 Read (TRAPBY64R) — R/WC. This bit indicates if the event 
occurred. Note that even if the corresponding enable bit is not set in bit 2, this bit will 
still be active. It is up to the SMM code to use the enable bit to determine the exact 
cause of the SMI#. 


0 = Software clears this bit by writing a 1 to the bit location in any of the controllers. 
1 = Event Occurred. 


SMI Caused by Port 60 Write (TRAPBY60W) — R/WC. This bit indicates if the event 
occurred. Note that even if the corresponding enable bit is not set in bit 1, this bit will 
still be active. It is up to the SMM code to use the enable bit to determine the exact 
cause of the SMI#. Note that the A20Gate Pass-Through Logic allows specific port 64h 
writes to complete without setting this bit. 


0 = Software clears this bit by writing a 1 to the bit location in any of the controllers. 
1 = Event Occurred. 


SMI Caused by Port 60 Read (TRAPBY60R) — R/WC. This bit indicates if the event 
occurred. Note that even if the corresponding enable bit is not set in the bit 0, then this 
bit will still be active. It is up to the SMM code to use the enable bit to determine the 
exact cause of the SMI#. 

0 = Software clears this bit by writing a 1 to the bit location in any of the controllers. 
1 = Event Occurred. 


SMI at End of Pass-Through Enable (SMI ATENDPS) — R/W. This bit enables SMI 
at the end of a pass-through. This can occur if an SMI is generated in the middle of a 
pass-through, and needs to be serviced later. 

0 = Disable 

1 = Enable 


Pass Through State (PSTATE) — RO. 


0 = If software needs to reset this bit, it should set bit 5 in all of the host controllers to 
0. 

1 = Indicates that the state machine is in the middle of an A2Z0GATE pass-through 
sequence. 


A20Gate Pass-Through Enable (A20PASSEN) — R/W. 


0 = Disable. 

1 = Enable. Allows A2Z0GATE sequence Pass-Through function. A specific cycle sequence 
involving writes to port 60h and 64h does not result in the setting of the SMI status 
bits. 


SMI on USB IRQ Enable (USBSMIEN) — R/W. 
0 = Disable 
1 = Enable. USB interrupt will cause an SMI event. 
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SMI on Port 64 Writes Enable (64WEN) — R/W. 
0 = Disable 
1 = Enable. A 1 in bit 11 will cause an SMI event. 


SMI on Port 64 Reads Enable (64REN) — R/W. 
0 = Disable 

1 = Enable. A 1 in bit 10 will cause an SMI event. 
SMI on Port 60 Writes Enable (GOWEN) — R/W. 
0 = Disable 

1 = Enable. A 1 in bit 9 will cause an SMI event. 
SMI on Port 60 Reads Enable (60REN) — R/W. 


0 = Disable 
1 = Enable. A 1 in bit 8 will cause an SMI event. 





16.1.24 USB_RES—USB Resume Enable Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: C4h Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


a 


7:2 Reserved 


PORT1IEN — R/W. Enable port 1 of the USB controller to respond to wakeup events. 


0 = The USB controller will not look at this port for a wakeup event. 
1 = The USB controller will monitor this port for remote wakeup and connect/ 


disconnect events. 


PORTOEN — R/W. Enable port 0 of the USB controller to respond to wakeup events. 

0 = The USB controller will not look at this port for a wakeup event. 

1 = The USB controller will monitor this port for remote wakeup and connect/ 
disconnect events. 
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16.1.25 CWP—Core Well Policy Register 
(USB—D29:F0/ F1/ F2/ F3, D26:FO/ F1/ F2) 
Address Offset: C8h Attribute: R/W 


Default Value: 00h Size: 8 bits 
Function Level Reset: No 


7:3 Reserved 


Host Controller Alignment Enable (HCAE) — R/W. Setting this bit aligns the host 
controller’s start of the first frame to a central lms heartbeat. Setting this bit for each 
controller maintains alignment. 


HCHALTED Bit Read Mode (HBM) — R/W. This bit controls what SW sees on reads of 
the HCHALTED bit in the interval between when SW has set the RUN bit and the first 
heartbeat. 


0 = Software reads the delayed value of HCHALTED (sees a 1 while the controller is 
waiting for the heartbeat). 

1 = Software reads the value it would expect to see without the delay (sees a 0 even 
while the controller is waiting for the heartbeat). 


Static Bus Master Status Policy Enable (SBMSPE) — R/W. 


0 = The UHCI host controller dynamically sets the Bus Master status bit (Power 
Management 1 Status Register,[PMBASE+00h], bit 4) based on the memory 
accesses that are scheduled. The default setting provides a more accurate 
indication of snoopable memory accesses in order to help with software-invoked 
entry to C3 and C4 power states 

1 = The UHCI host controller statically forces the Bus Master Status bit in power 
management space to 1 whenever the HCHalted bit (USB Status Register, 
Base+02h, bit 5) is cleared. 


NOTE: The PCI Power Management registers are enabled in the PCI Device 31: 
Function 0 space (PM_IO_EN), and can be moved to any I/O location (128-byte 
aligned). 





16.1.26 UCR1—UCHI Configuration Register 1 
(USB—D29:FO/ F1/ F2/ F3, D26:FO/ F1/ F2) 


Address Offset: CAh Attribute: R/W 
Default Value: 00h Size: 8 bits 


C9 a 


prior to completing transactions as a target. When this bit is set to 0, the UHCI 
controller will allow completions from target transactions to complete independent of 


Initiator/ Target Arbitration Disable (I TAD) — R/W. 
When this bit is set to 1, the UHCI controller will force DMA read requests to return 
the state of forward progress of the master. 
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Table 16-3. 


644 


USB I/ O Registers 


Some of the read/write register bits that deal with changing the state of the USB hub 
ports function such that on read back they reflect the current state of the port, and not 
necessarily the state of the last write to the register. This allows the software to poll the 
state of the port and wait until it is in the proper state before proceeding. A host 
controller reset, global reset, or port reset will immediately terminate a transfer on the 
affected ports and disable the port. This affects the USBCMD register, bit 4 and the 
PORTSC registers, bits [12,6,2]. See individual bit descriptions for more detail. 


USB I/ O Registers 


BASE + 


08-OBh FRBASEADD | Frame List Base Address Undefined R/W 
OCh SOFMOD Start of Frame Modify 40h R/W 


10-11h | PORTSCO | Port 0 Status/Control 0080h BE RORY 
(see Note 1) 

12-13h | PORTSC1_ | Port 1 Status/Control 0080h BNC BO RE 
(see Note 1) 


NOTE: 
1. These registers are WORD writable only. Byte writes to these registers have unpredictable 
effects. 
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16.2.1 


USBCMD—USB Command Register 


1/O Offset: Base + (OOh-O1h) Attribute: R/W 
Default Value: 0000h Size: 16 bits 


The Command Register indicates the command to be executed by the serial bus host 
controller. Writing to the register causes a command to be executed. The table 
following the bit description provides additional information on the operation of the 
Run/Stop and Debug bits. 


a 


15:7 | Reserved 


Loop Back Test Mode — R/W. 

0 = Disable loop back test mode. 

1 = 1CH9 is in loop back test mode. When both ports are connected together, a write to 
one port will be seen on the other port and the data will be stored in I/O offset 18h. 


Max Packet (MAXP) — R/W. This bit selects the maximum packet size that can be 
used for full speed bandwidth reclamation at the end of a frame. This value is used by 
the host controller to determine whether it should initiate another transaction based on 
the time remaining in the SOF counter. Use of reclamation packets larger than the 
programmed size will cause a Babble error if executed during the critical window at 
frame end. The Babble error results in the offending endpoint being stalled. Software is 
responsible for ensuring that any packet which could be executed under bandwidth 
reclamation be within this size limit. 

0 = 32 bytes 

1 = 64 bytes 


Configure Flag (CF) — R/W. This bit has no effect on the hardware. It is provided only 

as a semaphore service for software. 

0 = Indicates that software has not completed host controller configuration. 

1 = HCD software sets this bit as the last action in its process of configuring the host 
controller. 


Software Debug (SWDBG) — R/W. The SWDBG bit must only be manipulated when 
the controller is in the stopped state. This can be determined by checking the HCHalted 
bit in the USBSTS register. 


0 = Normal Mode. 

1 = Debug mode. In SW Debug mode, the host controller clears the Run/Stop bit after 
the completion of each USB transaction. The next transaction is executed when 
software sets the Run/Stop bit back to 1. 


Force Global Resume (FGR) — R/W. 

0 = Software resets this bit to 0 after 20 ms has elapsed to stop sending the Global 
Resume signal. At that time all USB devices should be ready for bus activity. The 1 
to 0 transition causes the port to send a low speed EOP signal. This bit will remain 
a 1 until the EOP has completed. 

1 = Host controller sends the Global Resume signal on the USB, and sets this bit to 1 
when a resume event (connect, disconnect, or K-state) is detected while in global 
suspend mode. 


Enter Global Suspend Mode (EGSM) — R/W. 

0 = Software resets this bit to 0 to come out of Global Suspend mode. Software writes 
this bit to 0 at the same time that Force Global Resume (bit 4) is written to 0 or 
after writing bit 4 to 0. 

1 = Host controller enters the Global Suspend mode. No USB transactions occur during 
this time. The Host controller is able to receive resume signals from USB and 
interrupt the system. Software must ensure that the Run/Stop bit (bit 0) is cleared 
prior to setting this bit. 
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Global Reset (GRESET) — R/W. 


0 = This bit is reset by the software after a minimum of 10 ms has elapsed as specified 
in Chapter 7 of the USB Specification. 

1 = Global Reset. The host controller sends the global reset signal on the USB and then 
resets all its logic, including the internal hub registers. The hub registers are reset 
to their power on state. Chip Hardware Reset has the same effect as Global Reset 
(bit 2), except that the host controller does not send the Global Reset on USB. 


Host Controller Reset (HCRESET) — R/W. The effects of HCRESET on Hub registers 
are slightly different from Chip Hardware Reset and Global USB Reset. The HCRESET 
affects bits [8,3:0] of the Port Status and Control Register (PORTSC) of each port. 
HCRESET resets the state machines of the host controller including the Connect/ 
Disconnect state machine (one for each port). When the Connect/Disconnect state 
machine is reset, the output that signals connect/disconnect are negated to 0, 
effectively signaling a disconnect, even if a device is attached to the port. This virtual 
disconnect causes the port to be disabled. This disconnect and disabling of the port 
causes bit 1 (connect status change) and bit 3 (port enable/disable change) of the 
PORTSC to get set. The disconnect also causes bit 8 of PORTSC to reset. About 64 bit 


times after HCRESET goes to 0, the connect and low-speed detect will take place, and 

bits 0 and 8 of the PORTSC will change accordingly. 

0 = Reset by the host controller when the reset process is complete. 

1 = Reset. When this bit is set, the host controller module resets its internal timers, 
counters, state machines, etc. to their initial value. Any transaction currently in 
progress on USB is immediately terminated. 


Run/ Stop (RS) — R/W. When set to 1, the |CH9 proceeds with execution of the 
schedule. The ICH9 continues execution as long as this bit is set. When this bit is 
cleared, the |CH9 completes the current transaction on the USB and then halts. The HC 
Halted bit in the status register indicates when the host controller has finished the 
transaction and has entered the stopped state. The host controller clears this bit when 
the following fatal errors occur: consistency check failure, memory access errors. 

0 = Stop 

1 = Run 


NOTE: This bit should only be cleared if there are no active Transaction Descriptors in 
the executable schedule or software will reset the host controller prior to setting 
this bit again. 
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Table 16-4. Run/ Stop, Debug Bit Interaction SWDBG (Bit 5), Run/ Stop (Bit 0) Operation 


SWDBG | Run/ Stop mee 


If executing a command, the host controller completes the command 
and then stops. The 1.0 ms frame counter is reset and command list 
execution resumes from start of frame using the frame list pointer 
selected by the current value in the FRNUM register. (While Run/ 
Stop=0, the FRNUM register (BASE + 06h) can be reprogrammed). 
Execution of the command list resumes from Start Of Frame using the 
frame list pointer selected by the current value in the FRNUM register. 
The host controller remains running until the Run/Stop bit is cleared 
(by software or hardware). 


If executing a command, the host controller completes the command 
and then stops and the 1.0 ms frame counter is frozen at its current 
value. All status are preserved. The host controller begins execution 
of the command list from where it left off when the Run/Stop bit is 


set. 

Execution of the command list resumes from where the previous 
execution stopped. The Run/Stop bit is set to 0 by the host controller 
when a TD is being fetched. This causes the host controller to stop 
again after the execution of the TD (single step). When the host 
controller has completed execution, the HC Halted bit in the Status 
Register is set. 





When the USB host controller is in Software Debug Mode (USBCMD Register bit 5=1), 
the single stepping software debug operation is as follows: 


To Enter Software Debug Mode: 


di; 
2. 
3. 


HCD puts host controller in Stop state by setting the Run/Stop bit to 0. 
HCD puts host controller in Debug Mode by setting the SWDBG bit to 1. 


HCD sets up the correct command list and Start Of Frame value for starting point in 
the Frame List Single Step Loop. 


4. HCD sets Run/Stop bit to 1. 


Host controller executes next active TD, sets Run/Stop bit to 0, and stops. 


6. HCD reads the USBCMD register to check if the single step execution is completed 


8. 
9. 


(HCHalted=1). 


. HCD checks results of TD execution. Go to step 4 to execute next TD or step 8 to 


end Software Debug mode. 
HCD ends Software Debug mode by setting SWDBG bit to 0. 
HCD sets up normal command list and Frame List table. 


10. HCD sets Run/Stop bit to 1 to resume normal schedule execution. 


In Software Debug mode, when the Run/Stop bit is set, the host controller starts. 
When a valid TD is found, the Run/Stop bit is reset. When the TD is finished, the 
HCHalted bit in the USBSTS register (bit 5) is set. 


The SW Debug mode skips over inactive TDs and only halts after an active TD has been 
executed. When the last active TD in a frame has been executed, the host controller 
waits until the next SOF is sent and then fetches the first TD of the next frame before 
halting. 
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This HCHalted bit can also be used outside of Software Debug mode to indicate when 
the host controller has detected the Run/Stop bit and has completed the current 
transaction. Outside of the Software Debug mode, setting the Run/Stop bit to 0 always 
resets the SOF counter so that when the Run/Stop bit is set the host controller starts 
over again from the frame list location pointed to by the Frame List Index (see FRNUM 
Register description) rather than continuing where it stopped. 


16.2.2 USBSTS—USB Status Register 


1/O Offset: Base + (02h-03h) Attribute: R/WC 
Default Value: 0020h Size: 16 bits 


This register indicates pending interrupts and various states of the host controller. The 
status resulting from a transaction on the serial bus is not indicated in this register. 


HCHalted — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = The host controller has stopped executing as a result of the Run/Stop bit being set 
to 0, either by software or by the host controller hardware (debug mode or an 
internal error). Default. 


Host Controller Process Error — R/WC. 


0 = Software clears this bit by writing a 1 to it. 

1 = The host controller has detected a fatal error. This indicates that the host controller 
suffered a consistency check failure while processing a Transfer Descriptor. An 
example of a consistency check failure would be finding an invalid PID field while 
processing the packet header portion of the TD. When this error occurs, the host 
controller clears the Run/Stop bit in the Command register (D29:FO/F1/F2/F3, 
D26:FO/F1/F2:BASE + 00h, bit 0) to prevent further schedule execution. A 
hardware interrupt is generated to the system. 


Host System Error — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = A serious error occurred during a host system access involving the host controller 
3 module. In a PCI system, conditions that set this bit to 1 include PCI Parity error, 


PCI Master Abort, and PCI Target Abort. When this error occurs, the host controller 
clears the Run/Stop bit in the Command register to prevent further execution of 
the scheduled TDs. A hardware interrupt is generated to the system. 


Resume Detect (RSM_DET) — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = The host controller received a “RESUME” signal from a USB device. This is only 
valid if the Host controller is in a global suspend state (Command register, D29:FO/ 
F1/F2/F3, D26:FO/F1/F2: BASE + 00h, bit 3 = 1). 


USB Error Interrupt — R/WC. 


0 = Software clears this bit by writing a 1 to it. 

1 = Completion of a USB transaction resulted in an error condition (e.g., error counter 
underflow). If the TD on which the error interrupt occurred also had its |OC bit 
(D29:FO/F1/F2/F3, D26:FO/F1/F2:BASE + 04h, bit 2) set, both this bit and Bit 0 
are set. 


USB Interrupt (USBINT) — R/WC. 


0 = Software clears this bit by writing a 1 to it. 

1 = The host controller sets this bit when the cause of an interrupt is a completion of a 
USB transaction whose Transfer Descriptor had its |OC bit set. Also set when a 
short packet is detected (actual length field in TD is less than maximum length field 
in TD), and short packet detection is enabled in that TD. 
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16.2.3 


16.2.4 


USBINTR—USB Interrupt Enable Register 


1/O Offset: Base + (04h-05h) Attribute: R/W 
Default Value: 0000h Size: 16 bits 


This register enables and disables reporting of the corresponding interrupt to the 
software. When a bit is set and the corresponding interrupt is active, an interrupt is 
generated to the host. Fatal errors (host controller processor error, (D29:FO/F1/F2, 
D26:FO/F1:BASE + 02h, bit 4, USBSTS Register) cannot be disabled by the host 
controller. Interrupt sources that are disabled in this register still appear in the Status 
Register to allow the software to poll for events. 


Pe on 


15:5 | Reserved 


| 4 | Scratchpad (SP) — R/W. 


Short Packet Interrupt Enable — R/W. 


0 = Disabled. 
1 = Enabled. 


Interrupt on Complete Enable (1OC) — R/W. 


0 = Disabled. 

1 = Enabled. 

Resume Interrupt Enable — R/W. 

0 = Disabled. 

1 = Enabled. 

Timeout/ CRC Interrupt Enable — R/W. 


0 = Disabled. 
1 = Enabled. 





FRNUM—Frame Number Register 


1/O Offset: Base + (06-07h) Attribute: R/W (Writes must be 
Word Writes) 
Default Value: 0000h Size: 16 bits 


Bits [10:0] of this register contain the current frame number that is included in the 
frame SOF packet. This register reflects the count value of the internal frame number 
counter. Bits [9:0] are used to select a particular entry in the Frame List during 
scheduled execution. This register is updated at the end of each frame time. 


This register must be written as a word. Byte writes are not supported. This register 
cannot be written unless the host controller is in the STOPPED state as indicated by the 
HCHalted bit (D29:FO/F1/F2/F3, D26:FO/F1/F2:BASE + 02h, bit 5). A write to this 
register while the Run/Stop bit is set (D29:FO/F1/F2/F3, D26:FO/F1/F2:BASE + 00h, bit 
0) is ignored. 


frame (approximately every 1 ms). In addition, bits [9:0] are used for the Frame List 
current index and correspond to memory address signals [11:2]. 





Frame List Current I ndex/ Frame Number — R/W. This field provides the frame 
10:0 number in the SOF Frame. The value in this register increments at the end of each time 
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FRBASEADD—Frame List Base Address Register 


1/O Offset: Base + (O8h-OBh) Attribute: R/W 
Default Value: Undefined Size: 32 bits 


This 32-bit register contains the beginning address of the Frame List in the system 
memory. HCD loads this register prior to starting the schedule execution by the host 
controller. When written, only the upper 20 bits are used. The lower 12 bits are written 
as Os (4 KB alignment). The contents of this register are combined with the frame 
number counter to enable the host controller to step through the Frame List in 
sequence. The two least significant bits are always 00. This requires dword-alignment 
for all list entries. This configuration supports 1024 Frame List entries. 


Fs [ee 


31:12 Base Address — R/W. These bits correspond to memory address signals [31:12], 
, respectively. 
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SOFMOD-—Start of Frame Modify Register 


I/O Offset: Base + (0Ch) Attribute: R/W 
Default Value: 40h Size: 8 bits 


This 1-byte register is used to modify the value used in the generation of SOF timing on 
the USB. Only the 7 least significant bits are used. When a new value is written into 
these 7 bits, the SOF timing of the next frame will be adjusted. This feature can be 
used to adjust out any offset from the clock source that generates the clock that drives 
the SOF counter. This register can also be used to maintain real time synchronization 
with the rest of the system so that all devices have the same sense of real time. Using 
this register, the frame length can be adjusted across the full range required by the 
USB specification. Its initial programmed value is system dependent based on the 
accuracy of hardware USB clock and is initialized by system BIOS. It may be 
reprogrammed by USB system software at any time. Its value will take effect from the 
beginning of the next frame. This register is reset upon a host controller reset or global 
reset. Software must maintain a copy of its value for reprogramming if necessary. 


SOF Timing Value — R/W. Guidelines for the modification of frame time are contained 
in Chapter 7 of the USB Specification. The SOF cycle time (number of SOF counter clock 
periods to generate a SOF frame length) is equal to 11936 + value in this field. The 
default value is decimal 64 which gives a SOF cycle time of 12000. For a 12 MHz SOF 
counter clock input, this produces a 1 ms Frame period. The following table indicates 


Frame Length (# 12 MHz Clocks) SOF Timing Value (this register) 


what SOF Timing Value to program into this field for a certain frame period. 
(decimal) (decimal) 
11936 0 


11937 1 
11999 63 
12000 64 
12001 65 
12062 
12063 
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PORTSC[0,1]—Port Status and Control Register 


/O Offset: Port 0/2/4/6/8/10: Base + (10h—11h) Attribute: R/WC, RO, 
Port 1/3/5/7/9/11: Base + (12h—13h) R/W (Word writes only) 
Default Value: 0080h Size: 16 bits 


For UHCI #1 (D29:FO), this applies to |CH9 USB ports 0 and 1; for UHCI #2 (D29:F1), 
this applies to |CH9 USB ports 2 and 3; for UHCI #3 (D29:F2), this applies to |CH9 USB 
ports 4 and 5, for UHCI #4 (D26:F0), this applies to |CH9 USB ports 6 and 7, for UHCI 
#5 (D26:F1), this applies to |CH9 USB ports 8 and 9 and for UHCI #6 (D26:F2 or 
D29:F3), this applies to |CH9 USB ports 10 and 11. 


After a power-up reset, global reset, or host controller reset, the initial conditions of a 
port are: no device connected, Port disabled, and the bus line status is 00 (single- 
ended 0). 


Port Reset and Enable Sequence 


When software wishes to reset a USB device it will assert the Port Reset bit in the Port 
Status and Control register. The minimum reset signaling time is 10 mS and is enforced 
by software. To complete the reset sequence, software clears the port reset bit. The 
Intel UHCI controller must re-detect the port connect after reset signaling is complete 
before the controller will allow the port enable bit to de set by software. This time is 
approximately 5.3 us. Software has several possible options to meet the timing 
requirement and a partial list is enumerated below: 


« |terate a short wait, setting the port enable bit and reading it back to see if the 
enable bit is set. 


* Poll the connect status bit and wait for the hardware to recognize the connect prior 
to enabling the port. 


e Wait longer than the hardware detect time after clearing the port reset and prior to 
enabling the port. 


ee 


Suspend — R/W. This bit should not be written to a 1 if global suspend is active (bit 
3=1 in the USBCMD register). Bit 2 and bit 12 of this register define the hub states as 
follows: 
Bits [12,2] Hub State 

X,0 Disable 

0, 1 Enable 

1,1 Suspend 
When in suspend state, downstream propagation of data is blocked on this port, except 
for single-ended 0 resets (global reset and port reset). The blocking occurs at the end 

12 of the current transaction, if a transaction was in progress when this bit was written to 

1. In the suspend state, the port is sensitive to resume detection. Note that the bit 
status does not change until the port is suspended and that there may be a delay in 
suspending a port if there is a transaction currently in progress on the USB. 


1 = Port in suspend state. 
0 = Port not in suspend state. 


NOTE: Normally, if a transaction is in progress when this bit is set, the port will be 
suspended when the current transaction completes. However, in the case of a 
specific error condition (out transaction with babble), the |CH9 may issue a 
start-of- frame, and then suspend the port. 


Overcurrent I ndicator — R/WC. Set by hardware. 


0 = Software clears this bit by writing a 1 to it. 
1 = Overcurrent pin has gone from inactive to active on this port. 
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Overcurrent Active — RO. This bit is set and cleared by hardware. 


0 = Indicates that the overcurrent pin is inactive (high). 
1 = Indicates that the overcurrent pin is active (low). 


Port Reset — R/W. 


0 = Port is not in Reset. 
1 = Port is in Reset. When set, the port is disabled and sends the USB Reset signaling. 


Low Speed Device Attached (LS) — RO. 


0 = Full speed device is attached. 
1 = Low speed device is attached to this port. 


7 Reserved — RO. Always read as 1. 


Resume Detect (RSM_DET) — R/W. Software sets this bit to a 1 to drive resume 
signaling. The host controller sets this bit to a 1 if a J-to-K transition is detected for at 
least 32 microseconds while the port is in the Suspend state. The |CH9 will then reflect 
the K-state back onto the bus as long as the bit remains a1, and the port is still in the 
suspend state (bit 12,2 are ‘11’). Writing a 0 (from 1) causes the port to send a low 
speed EOP. This bit will remain a 1 until the EOP has completed. 

0 = No resume (K-state) detected/driven on port. 

1 = Resume detected/driven on port. 


Line Status — RO. These bits reflect the D+ (bit 4) and D- (bit 5) signals lines’ logical 
levels. These bits are used for fault detect and recovery as well as for USB diagnostics. 
This field is updated at EOF2 time (See Chapter 11 of the USB Specification). 


10 

Port Enable/ Disable Change — R/WC. For the root hub, this bit gets set only when a 
port is disabled due to disconnect on that port or due to the appropriate conditions 

3 existing at the EOF2 point (See Chapter 11 of the USB Specification). 

0 = No change. Software clears this bit by writing a 1 to the bit location. 

1 = Port enabled/disabled status has changed. 


Port Enabled/ Disabled (PORT_EN) — R/W. Ports can be enabled by host software 
only. Ports can be disabled by either a fault condition (disconnect event or other fault 
condition) or by host software. Note that the bit status does not change until the port 
state actually changes and that there may be a delay in disabling or enabling a port if 
there is a transaction currently in progress on the USB. 

0 = Disable 

1 = Enable 


Connect Status Change — R/WC. This bit indicates that a change has occurred in the 
port’s Current Connect Status (see bit 0). The hub device sets this bit for any changes 
to the port device connect status, even if system software has not cleared a connect 
status change. If, for example, the insertion status changes twice before system 
software has cleared the changed condition, hub hardware will be setting” an already- 
set bit (i.e., the bit will remain set). However, the hub transfers the change bit only 
once when the host controller requests a data transfer to the Status Change endpoint. 
System software is responsible for determining state change history in such a case. 


0 = No change. Software clears this bit by writing a 1 to it. 
1 = Change in Current Connect Status. 


Current Connect Status — RO. This value reflects the current state of the port, and 
may not correspond directly to the event that caused the Connect Status Change bit 
(Bit 1) to be set. 

0 = No device is present. 

1 = Device is present on port. 
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17.1 


Note: 


Table 17-1. 


EHCI Controller Registers 
(D29:F7, D26:F7) 


USB EHCI Configuration Registers 
(USB EHCI —D29:F7, D26:F7) 


Register address locations that are not shown in Table 17-1 should be treated as 
Reserved 
(see Section 9.2 for details). 


USB EHCI PCI Register Address Map (USB EHCI—D29:F7, D26:F7) (Sheet 1 of 


2) 
00Oh-O1h | VID Vendor Identification | 8086h_— 


02h-03h Device Identification Serco] register 
description 


oan 05h 3000h 
a6h-O7h 0230h 


or [ae anew ST 
[oh [Programming Tnterice [20h RO 
[oan [Set [ub Class Code Sia 
[oan [cc [ase Class Coe och 
[oon [Pur [Primary Master Latency Timer [ooh[ RO 


2Ch-2Dh SVID Ge Ee) ebeey > ci vender XXXXh R/W 
Identification 

2Eh-2Fh SID Ge Ee) phaey ses XXXXh R/W 
Identification 


~ description 
50h PWR CAPID PCI Power Management O1h 
a Capability 1D 


52h-53h PWR_CAP Power Management Capabilities C9C2h 


54h-55h | PWR CNTL STS Power Management Control/ 0000h R/W, R/WC, 
= = Status RO 


[sah | DEBUG_CAPID [Debug Port CapabimtyT> [OAR RO 
[Sah [—_NxT_PTR2 [Next Item Pointer #2__———‘[| 98h [RO 
[San-5ah | DEBUG_BASE [Debug Port Base Oiset | __20A0H_ [| RO 
[coh | USB_RELNUM [USB Release Number___[ 20h [RO 
Penmom | -[Reseved SSCS 
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Table 17-1. USB EHCI PCI Register Address Map (USB EHCI—D29:F7, D26:F7) (Sheet 2 of 


Note: 


17.1.1 


17.1.2 
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2) 
[onset [ wnenonie [Regiterniome [Defautevewe | Tyne | 
ésh- 68h: || eG eat cap | 2B ERC! Pcoacy support 00000001h R/W, RO 
a = Extended Capability 
7 USB EHCI Legacy Extended R/W, R/ WC, 
70h-73h Intel Specific USB 2.0 SMI 00000000h 
= 
; 
/ 
/ 





“7m [=| = 
ROW, RWL 
[seh [ FIR CID [FUR Capabiiy 1D «dh 
3sh | FERNEXT [FUR Next Capabiity Pome [ooh [RO] 
00h 
00h 


4 
EHCIIR2 EHCI Initialization Register 2 20001706h 


All configuration registers in this section are in the core well and reset by a core well 
reset and the D3-to-DO warm reset, except as noted. 


QAh-9Bh FLR_CLV eee eepaoiihy Penotand 2006h RO, R/WO 
= Version 


Vi D—Vendor Identification Register 
(USB EHCI —D29:F7, D26:F7) 


Offset Address: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16 bits 


a 





Vendor ID — RO. This is a 16-bit value assigned to Intel. 


DI D—Device | dentification Register 
(USB EHCI —D29:F7, D26:F7) 


Offset Address: O2h-03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


fr 


Device ID — RO. This is a 16-bit value assigned to the Intel® 1CH9 USB EHCI 


controller. Refer to the Intel® I/O Controller Hub (ICH9) Family Specification Update 
for the value of the Device ID Register. 
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17.1.3 PCI CMD—PCI Command Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: O4h-05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


a 
15:11 | Reserved 


Interrupt Disable — R/W. 


0 = The function is capable of generating interrupts. 
1 = The function can not generate its interrupt to the interrupt controller. 


Note that the corresponding Interrupt Status bit (D29:F7, D26:F7:06h, bit 3) is not 
affected by the interrupt enable. 
Fast Back to Back Enable (FBE) — RO. Hardwired to 0. 


SERR# Enable (SERR_EN) — R/W. 


0 = Disables EHC’s capability to generate an SERR#. 
1 = The Enhanced Host controller (EHC) is capable of generating (internally) SERR# in 
the following cases: 


¢ when it receive a completion status other than “successful” for one of its DMA- 
initiated memory reads on DMI (and subsequently on its internal interface). 


e« When it detects an address or command parity error and the Parity Error 
Response bit is set. 


¢ When it detects a data parity error (when the data is going into the EHC) and the 
Parity Error Response bit is set. 


Wait Cycle Control (WCC) — RO. Hardwired to 0. 


Parity Error Response (PER) — R/W. 

0 = The EHC is not checking for correct parity (on its internal interface). 

1 = The EHC is checking for correct parity (on its internal interface) and halt operation 
when bad parity is detected during the data phase. 


NOTE: If the EHC detects bad parity on the address or command phases when the bit is 
set to 1, the host controller does not take the cycle. It halts the host controller 
(if currently not halted) and sets the Host System Error bit in the USBSTS 
register. This applies to both requests and completions from the system 
interface. 


This bit must be set in order for the parity errors to generate SERR#. 
VGA Palette Snoop (VPS) — RO. Hardwired to 0. 

Postable Memory Write Enable (PMWE) — RO. Hardwired to 0. 
Special Cycle Enable (SCE) — RO. Hardwired to 0. 


Bus Master Enable (BME) — R/W. 


0 = Disables this functionality. 
1 = Enables the |CH9 to act as a master on the PCI bus for USB transfers. 


Memory Space Enable (MSE) — R/W. This bit controls access to the USB 2.0 Memory 
Space registers. 


0 = Disables this functionality. 
1 = Enables accesses to the USB 2.0 registers. The Base Address register (D29:F7, 
D26:F7:10h) for USB 2.0 should be programmed before this bit is set. 


1/0 Space Enable (IOSE) — RO. Hardwired to 0. 
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PCISTS—PCI Status Register (USB EHCI —D29:F7, D26:F7) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: 0290h Size: 16 bits 


For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 
the bit has no effect. 


Detected Parity Error (DPE) — R/WC. 

0 = No parity error detected. 

1 = This bit is set by the ICH9 when a parity error is seen by the EHCI controller, 
regardless of the setting of bit 6 or bit 8 in the Command register or any other 
conditions. 


Signaled System Error (SSE) — R/WC. 

0 = No SERR# signaled by ICH9. 

1 = This bit is set by the ICH9 when it signals SERR# (internally). The SER_EN bit (bit 
8 of the Command Register) must be 1 for this bit to be set. 


Received Master Abort (RMA) — R/WC. 

0 = No master abort received by EHC on a memory access. 

1 = This bit is set when EHC, as a master, receives a master abort status on a memory 
access. This is treated as a Host Error and halts the DMA engines. This event can 
optionally generate an SERR# by setting the SERR# Enable bit. 


Received Target Abort (RTA) — R/WC. 
0 = No target abort received by EHC on memory access. 

12 1 = This bit is set when EHC, as a master, receives a target abort status on a memory 
access. This is treated as a Host Error and halts the DMA engines. This event can 
optionally generate an SERR# by setting the SERR# Enable bit (D29:F7, 
D26:F7:04h, bit 8). 

Signaled Target Abort (STA) — RO. This bit is used to indicate when the EHCI function 

11 responds to a cycle with a target abort. There is no reason for this to happen, so this bit 

is hardwired to 0. 


DEVSEL# Timing Status (DEVT_STS) — RO. This 2-bit field defines the timing for 
DEVSEL# assertion. 
Master Data Parity Error Detected (DPED) — R/WC. 


0 = No data parity error detected on USB2.0 read completion packet. 

1 = This bit is set by the I|CH9 when a data parity error is detected on a USB 2.0 read 
completion packet on the internal interface to the EHCI host controller and bit 6 of 
the Command register is set to 1. 


Fast Back to Back Capable (FB2BC) — RO. Hardwired to 1. 


User Definable Features (UDF) — RO. Hardwired to 0. 
66 MHz Capable (66 MHz _CAP) — RO. Hardwired to 0. 


Capabilities List (CAP_LIST) — RO. Hardwired to 1 indicating that offset 34h contains a 
valid capabilities pointer. 


Interrupt Status — RO. This bit reflects the state of this function’s interrupt at the 
input of the enable/disable logic. 


0 = This bit will be 0 when the interrupt is deasserted. 
1 = This bit is a 1 when the interrupt is asserted. 


The value reported in this bit is independent of the value in the Interrupt Enable bit. 


Reserved 
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17.1.5 RI D—Revision I dentification Register 
(USB EHCI —D29:F7, D26:F7) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


Revision ID — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family Specification 
Update for the value of the Revision ID Register 





17.1.6 PI —Programming Interface Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: O9h Attribute: RO 
Default Value: 20h Size: 8 bits 


Description 


7:0 Programming I nterface — RO. A value of 20h indicates that this USB 2.0 host 
, controller conforms to the EHCI Specification. 
17.1.7 SCC—Sub Class Code Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: OAh Attribute: RO 
Default Value: 03h Size: 8 bits 


a 
03h = Universal serial bus host controller. 
17.1.8 BCC—Base Class Code Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: OBh Attribute: RO 
Default Value: 0Ch Size: 8 bits 


} Bit | Description 


7:0 








Base Class Code (BCC) — RO. 
OCh = Serial bus controller. 
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17.1.10 


17.1.11 
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PMLT—Primary Master Latency Timer Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


= cara een 


Master Latency Timer Count (MLTC) — RO. Hardwired to 00h. Because the EHCI 


controller is internally implemented with arbitration on an interface (and not PCI), it 
does not need a master latency timer. 





MEM_BASE—Memory Base Address Register 
(USB EHCI—D29:F7, D26:F7) 


Address Offset: 10h-13h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


a 


Base Address — R/W. Bits [31:10] correspond to memory address signals [31:10], 
respectively. This gives 1-KB of locatable memory space aligned to 1-KB boundaries. 


| 9:4 | Reserved 


Prefetchable — RO. Hardwired to 0 indicating that this range should not be 
prefetched. 


Type — RO. Hardwired to 00b indicating that this range can be mapped anywhere 
2:1 ari : 
within 32-bit address space. 


Resource Type Indicator (RTE) — RO. Hardwired to 0 indicating that the base 
address field in this register maps to memory space. 





SVI D—USB EHCI Subsystem Vendor ID Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 2Ch-2Dh Attribute: R/W 
Default Value: XXXXh Size: 16 bits 
Reset: None 


ES res. ae 


Subsystem Vendor ID (SVID) — R/W. This register, in combination with the USB 2.0 
Subsystem ID register, enables the operating system to distinguish each subsystem 
from the others. 


NOTE: Writes to this register are enabled when the WRT_RDONLY bit (D29:F7, 
D26:F7:80h, bit 0) is set to 1. 
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17.1.12 SID—USB EHCI Subsystem ID Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 2Eh-2Fh Attribute: R/W 
Default Value: XXXXh Size: 16 bits 
Reset: None 


Pe etn 


Subsystem ID (SID) — R/W. BIOS sets the value in this register to identify the 
Subsystem ID. This register, in combination with the Subsystem Vendor ID register, 


enables the operating system to distinguish each subsystem from other(s). 


NOTE: Writes to this register are enabled when the WRT_RDONLY bit (D29:F7, 
D26:F7:80h, bit 0) is set to 1. 





17.1.13 CAP_PTR—Capabilities Pointer Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 34h Attribute: RO 
Default Value: 50h Size: 8 bits 


a 


Capabilities Pointer (CAP_ PTR) — RO. This register points to the starting offset of 
the USB 2.0 capabilities ranges. 





17.1.14 INT_LN—Interrupt Line Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 3Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


a 


Interrupt Line (INT_LN) — R/W. This data is not used by the Intel® ICH9. It is used 
as a Scratchpad register to communicate to software the interrupt line that the 
interrupt pin is connected to. 





17.1.15 INT_PN—Interrupt Pin Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 3Dh Attribute: RO 
Default Value: | See Description Size: 8 bits 


a 


Interrupt Pin — RO. This reflects the value of D291P.EIP (Chipset Config 


Registers: Offset 3108: bits 31:28) or D26IP.EIP (Chipset Config Registers: Offset 
3114: bits 31:28). 
NOTE: Bits 7:4 are always Oh 
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17.1.16 PWR_CAPID—PCI Power Management Capability 1D 
Register (USB EHCI —D29:F7, D26:F7) 


Address Offset: 50h Attribute: RO 
Default Value: Olh Size: 8 bits 


a 


Power Management capabilities field. 





Ea Power Management Capability |D — RO. A value of 01h indicates that this is a PCI 


17.11.17 NXT_PTR1—Next Item Pointer #1 Register 
(USB EHCI—D29:F7, D26:F7) 


Address Offset: 51h Attribute: R/W 
Default Value: 58h Size: 8 bits 


a 


Next Item Pointer 1 Value — R/W (special). This register defaults to 58h, which 
indicates that the next capability registers begin at configuration offset 58h. This 
register is writable when the WRT_RDONLY bit (D29:F7, D26:F7:80h, bit 0) is set. This 


allows BIOS to effectively hide the Debug Port capability registers, if necessary. This 
register should only be written during system initialization before the plug-and-play 
software has enabled any master-initiated traffic. Only values of 58h (Debug Port 
visible) and 0Oh (Debug Port invisible) are expected to be programmed in this register. 
NOTE: Register not reset by D3-to-DO warm reset. 
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17.1.18 PWR_CAP—Power Management Capabilities Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 52h-53h Attribute: R/W, RO 
Default Value: C9C2h Size: 16 bits 


C2 rrr ae 


PME Support (PME_ SUP) — R/W. This 5-bit field indicates the power states in which 
the function may assert PME#. The Intel® 1CH9 EHC does not support the D1 or D2 
states. For all other states, the |CH9 EHC is capable of generating PME#. Software 
should never need to modify this field. 

D2 Support (D2_SUP) — RO. 

0 = D2 State is not supported 

D1 Support (D1_SUP) — RO. 

0 = D1 State is not supported 


Auxiliary Current (AUX_CUR) — R/W. The |CH9 EHC reports 375 mA maximum 
suspend well current required when in the D3c¢o p state. 


Device Specific I nitialization (DSI )— RO. The |CH9 reports 0, indicating that no 
device- specific initialization is required. 


Reserved 


PME Clock (PME_CLK) — RO. The ICH9 reports 0, indicating that no PCI clock is 
required to generate PME#. 


Version (VER) — RO. The !CH9 reports 010b, indicating that it complies with Revision 
1.1 of the PCl Power Management Specification. 





1. Normally, this register is read-only to report capabilities to the power management 
software. To report different power management capabilities, depending on the system in 
which the ICH9 is used, bits 15:11 and 8:6 in this register are writable when the 
WRT_RDONLY bit (D29:F7, D26:F7:80h, bit 0) is set. The value written to this register 
does not affect the hardware other than changing the value returned during a read. 

2. Reset: core well, but not D3-to-DO warm reset. 
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17.1.19 PWR_CNTL_STS—Power Management Control/ 
Status Register (USB EHCI —D29:F7, D26:F7) 


Address Offset: 54h-55h Attribute: R/W, R/WC, RO 
Default Value: | 0000h Size: 16 bits 
Function Level Reset: No (Bits 8 and 15 only) 


PME Status — R/WC. 


0 = Writing a 1 to this bit will clear it and cause the internal PME to deassert (if 
enabled). 

1 = This bit is set when the ICH9 EHC would normally assert the PME# signal 
independent of the state of the PME_En bit. 


NOTE: This bit must be explicitly cleared by the operating system each time the 
operating system is loaded. 


This bit is not reset by Function Level Reset. 


Data Scale — RO. Hardwired to 00b indicating it does not support the associated Data 
register. 


Data Select — RO. Hardwired to 0000b indicating it does not support the associated 
Data register. 


PME Enable — R/W. 


0 = Disable. 
1 = Enables Intel® 1CH9 EHC to generate an internal PME signal when PME_ Status is 1. 


NOTE: This bit must be explicitly cleared by the operating system each time it is 
initially loaded. 
This bit is not reset by Function Level Reset. 


Power State — R/W. This 2-bit field is used both to determine the current power state 
of EHC function and to set a new power state. The definition of the field values are: 

00 = DO state 

11 = D3yHot state 

If software attempts to write a value of 10b or O1b in to this field, the write operation 
must complete normally; however, the data is discarded and no state change occurs. 
When in the D307 State, the |CH9 must not accept accesses to the EHC memory 
range; but the configuration space must still be accessible. When not in the DO state, 
the generation of the interrupt output is blocked. Specifically, the PIRQH is not asserted 
by the ICH9 when not in the DO state. 

When software changes this value from the D3yo7 state to the DO state, an internal 
warm (soft) reset is generated, and software must re-initialize the function. 





NOTE: Reset (bits 15, 8): suspend well, and not D3-to-DO warm reset nor core well reset. 
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17.1.20 DEBUG_CAPID—Debug Port Capability |D Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 58h Attribute: RO 
Default Value: OAh Size: 8 bits 


Lo 


Debug Port Capability 1D — RO. Hardwired to OAh indicating that this is the start of a 
Debug Port Capability structure. 





17.1.21 NXT_PTR2—Next Item Pointer #2 Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 59h Attribute: RO 
Default Value: 98h Size: 8 bits 
Function Level Reset: No 


Next Item Pointer 2 Capability — RO. This register points to the next capability in 
the Function Level Reset capability structure. 





17.1.22 DEBUG_BASE—Debug Port Base Offset Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 5Ah-5Bh Attribute: RO 
Default Value: 20A0h Size: 16 bits 


Description 


. BAR Number — RO. Hardwired to 001b to indicate the memory BAR begins at offset 
15:13 : d ‘ 
10h in the EHCI configuration space. 
12:0 Debug Port Offset — RO. Hardwired to OAOh to indicate that the Debug Port registers 
i begin at offset AOh in the EHCI memory range. 


17.1.23 USB _RELNUM—USB Release Number Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 60h Attribute: RO 
Default Value: 20h Size: 8 bits 





Description 


USB Release Number — RO. A value of 20h indicates that this controller follows 
Universal Serial Bus (USB) Specification, Revision 2.0. 
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17.1.24 FL_ADJ—Frame Length Adjustment Register 


666 


(USB EHCI —D29:F7, D26:F7) 


Address Offset: 61h Attribute: R/W 
Default Value: 20h Size: 8 bits 
Function Level Reset: No 


This feature is used to adjust any offset from the clock source that generates the clock 
that drives the SOF counter. When a new value is written into these six bits, the length 
of the frame is adjusted. Its initial programmed value is system dependent based on 
the accuracy of hardware USB clock and is initialized by system BIOS. This register 
should only be modified when the HChalted bit (D29:F7, D26:F7: CAPLENGTH + 24h, 
bit 12) in the USB2.0_STS register is a 1. Changing value of this register while the host 
controller is operating yields undefined results. It should not be reprogrammed by USB 
system software unless the default or BIOS programmed values are incorrect, or the 
system is restoring the register while returning from a suspended state. 


These bits in suspend well and not reset by a D3-to-DO warm rest or a core well reset. 


Reserved — RO. These bits are reserved for future use and should read as OOb. 


Frame Length Timing Value — R/W. Each decimal value change to this register 
corresponds to 16 high-speed bit times. The SOF cycle time (number of SOF counter 
clock periods to generate a SOF micro-frame length) is equal to 59488 + value in this 
field. The default value is decimal 32 (20h), which gives a SOF cycle time of 60000. 
Frame Length (# 480 MHz Frame Length Timing Value (this 
Clocks) (decimal) register) (decimal) 
5:0 


59488 0 
59504 1 
59520 2 
59984 31 
60000 32 
60480 62 
60496 63 
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17.1.25 PWAKE_CAP—Port Wake Capability Register 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 62-63h Attribute: R/W 
Default Value: O1FFh Size: 16 bits 
Function Level Reset: No 


This register is in the suspend power well. The intended use of this register is to 
establish a policy about which ports are to be used for wake events. Bit positions 1- 
8(D29) or 1-6(D26) in the mask correspond to a physical port implemented on the 
current EHCI controller. A 1 in a bit position indicates that a device connected below the 
port can be enabled as a wake-up device and the port may be enabled for disconnect/ 
connect or overcurrent events as wake-up events. This is an information-only mask 
register. The bits in this register do not affect the actual operation of the EHC! host 
controller. The system-specific policy can be established by BIOS initializing this 
register to a system-specific value. System software uses the information in this 
register when enabling devices and ports for remote wake-up. 


These bits are not reset by a D3-to-DO warm rest or a core well reset. 


a 


Reserved. 


Port Wake Up Capability Mask — R/W. Bit positions 1 through 8 (Device 29) or 1 
through 6(Device 26) correspond to a physical port implemented on this host controller. 
For example, bit position 1 corresponds to port 1, bit position 2 corresponds to port 2, 
etc. 





Port Wake I mplemented — R/W. A 1 in this bit indicates that this register is 
implemented to software. 
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17.1.26 


Note: 


17.1.27 


Note: 


668 


LEG EXT_CAP—USB EHCI Legacy Support Extended 
Capability Register (USB EHCI —D29:F7, D26:F7) 


Address Offset: 68-6Bh Attribute: R/W, RO 
Default Value: o00000001h Size: 32 bits 
Power Well: Suspend 


Function Level Reset: No 


These bits are not reset by a D3-to-DO warm rest or a core well reset. 


i 
31:25 | Reserved — RO. Hardwired to 00h 


HC OS Owned Semaphore — R/W. System software sets this bit to request ownership 
of the EHCI controller. Ownership is obtained when this bit reads as 1 and the HC BIOS 


Owned Semaphore bit reads as clear. 


23:17 | Reserved — RO. Hardwired to 00h 


HC BIOS Owned Semaphore — R/W. The BIOS sets this bit to establish ownership of 
the EHCI controller. System BIOS will clear this bit in response to a request for 
ownership of the EHCI controller by system software. 


Next EHCI Capability Pointer — RO. Hardwired to 00h to indicate that there are no 
EHCI Extended Capability structures in this device. 


Capability | D — RO. Hardwired to O1h to indicate that this EHCI Extended Capability is 
the Legacy Support Capability. 





LEG EXT_CS—USB EHCI Legacy Support Extended 
Control / Status Register (USB EHCI —D29:F7, D26:F7) 


Address Offset: 6C-6Fh Attribute: R/W, R/WC, RO 
Default Value: 00000000h Size: 32 bits 
Power Well: Suspend 


Function Level Reset: No 


These bits are not reset by a D3-to-DO warm rest or a core well reset. 


rr ae 


SMI on BAR — R/WC. Software clears this bit by writing a 1 to it. 

0 = Base Address Register (BAR) not written. 

1 = This bit is set to 1 when the Base Address Register (BAR) is written. 

SMI on PCI Command — R/WC. Software clears this bit by writing a 1 to it. 


0 = PCI Command (PCICMD) Register Not written. 
1 = This bit is set to 1 when the PCI Command (PCICMD) Register is written. 


SMI on OS Ownership Change — R/WC. Software clears this bit by writing a 1 to it. 

0 = No HC OS Owned Semaphore bit change. 

1 = This bit is set to 1 when the HC OS Owned Semaphore bit in the LEG_EXT_CAP 
register (D29:F7, D26:F7:68h, bit 24) transitions from 1 to 0 or 0 to 1. 
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SMI on Async Advance — RO. This bit is a shadow bit of the Interrupt on Async 
Advance bit (D29:F7, D26:F7:CAPLENGTH + 24h, bit 5) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Interrupt on Async 
Advance bit in the USB2.0_STS register. 


SMI on Host System Error — RO. This bit is a shadow bit of Host System Error bit in 
the USB2.0_STS register (D29:F7, D26:F7:CAPLENGTH + 24h, bit 4). 


NOTE: To clear this bit system software must write a 1 to the Host System Error bit in 
the USB2.0_STS register. 


SMI on Frame List Rollover — RO. This bit is a shadow bit of Frame List Rollover bit 
(D29:F7, D26:F7:CAPLENGTH + 24h, bit 3) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Frame List Rollover bit in 
the USB2.0_STS register. 


SMI on Port Change Detect — RO. This bit is a shadow bit of Port Change Detect bit 
(D29:F7, D26:F7:CAPLENGTH + 24h, bit 2) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Port Change Detect bit in 
the USB2.0_STS register. 


SMI on USB Error — RO. This bit is a shadow bit of USB Error Interrupt (USBERRINT) 
bit (D29:F7, D26:F7:CAPLENGTH + 24h, bit 1) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the USB Error Interrupt bit in 
the USB2.0_STS register. 


SMI on USB Complete — RO. This bit is a shadow bit of USB Interrupt (USBINT) bit 
(D29:F7, D26:F7: CAPLENGTH + 24h, bit 0) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the USB Interrupt bit in the 
USB2.0_STS register. 


SMI on BAR Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is 1 and SMI on BAR (D29:F7, D26:F7:6Ch, bit 31) is 1, then 
the host controller will issue an SMI. 


SMI on PCI Command Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is 1 and SMI on PCI Command (D29:F7, D26:F7:6Ch, bit 30) 
is 1, then the host controller will issue an SMI. 


SMI on OS Ownership Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1 AND the OS Ownership Change bit (D29:F7, 
D26:F7:6Ch, bit 29) is 1, the host controller will issue an SMI. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on Async Advance bit (D29:F7, 
D26:F7:6Ch, bit 21) is a1, the host controller will issue an SMI immediately. 


SMI on Host System Error Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on Host System Error (D29:F7, 
D26:F7:6Ch, bit 20) is a 1, the host controller will issue an SMI. 
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SMI on Async Advance — RO. This bit is a shadow bit of the Interrupt on Async 
Advance bit (D29:F7, D26:F7:CAPLENGTH + 24h, bit 5) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Interrupt on Async 
Advance bit in the USB2.0_STS register. 


SMI on Host System Error — RO. This bit is a shadow bit of Host System Error bit in 
the USB2.0_STS register (D29:F7, D26:F7:CAPLENGTH + 24h, bit 4). 


NOTE: To clear this bit system software must write a 1 to the Host System Error bit in 
the USB2.0_STS register. 


SMI on Frame List Rollover — RO. This bit is a shadow bit of Frame List Rollover bit 
(D29:F7, D26:F7: CAPLENGTH + 24h, bit 3) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Frame List Rollover bit in 
the USB2.0_STS register. 


SMI on Port Change Detect — RO. This bit is a shadow bit of Port Change Detect bit 
(D29:F7, D26:F7:CAPLENGTH + 24h, bit 2) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the Port Change Detect bit in 
the USB2.0_STS register. 


SMI on USB Error — RO. This bit is a shadow bit of USB Error Interrupt (USBERRINT) 
bit (D29:F7, D26:F7:CAPLENGTH + 24h, bit 1) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the USB Error Interrupt bit in 
the USB2.0_STS register. 


SMI on USB Complete — RO. This bit is a shadow bit of USB Interrupt (USBINT) bit 
(D29:F7, D26:F7: CAPLENGTH + 24h, bit 0) in the USB2.0_STS register. 


NOTE: To clear this bit system software must write a 1 to the USB Interrupt bit in the 
USB2.0_STS register. 


SMI on BAR Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is 1 and SMI on BAR (D29:F7, D26:F7:6Ch, bit 31) is 1, then 
the host controller will issue an SMI. 


SMI on PCI Command Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is 1 and SMI on PCI Command (D29:F7, D26:F7:6Ch, bit 30) 
is 1, then the host controller will issue an SMI. 


SMI on OS Ownership Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1 AND the OS Ownership Change bit (D29:F7, 
D26:F7:6Ch, bit 29) is 1, the host controller will issue an SMI. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on Async Advance bit (D29:F7, 
D26:F7:6Ch, bit 21) is a1, the host controller will issue an SMI immediately. 


SMI on Host System Error Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on Host System Error (D29:F7, 
D26:F7:6Ch, bit 20) is a 1, the host controller will issue an SMI. 
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SMI on Frame List Rollover Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1, and the SMI on Frame List Rollover bit (D29:F7, 
D26:F7:6Ch, bit 19) is a 1, the host controller will issue an SMI. 


SMI on Port Change Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on Port Change Detect bit (D29:F7, 


D26:F7:6Ch, bit 18) is a 1, the host controller will issue an SMI. 


SMI on USB Error Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on USB Error bit (D29:F7, D26:F7:6Ch, 
bit 17) is a 1, the host controller will issue an SMI immediately. 


SMI on USB Complete Enable — R/W. 


0 = Disable. 
1 = Enable. When this bit is a 1, and the SMI on USB Complete bit (D29:F7, 
D26:F7:6Ch, bit 16) is a 1, the host controller will issue an SMI immediately. 





17.1.28 SPECIAL_SMI—Intel Specific USB 2.0 SMI Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 70h-73h Attribute: R/W, R/WC 
Default Value: 00000000h Size: 32 bits 
Power Well: Suspend 


Function Level Reset: No 


Note: These bits are not reset by a D3-to-DO warm rest or a core well reset. 


Pe 2 


Reserved. 


SMI on PortOwner — R/WC. Software clears these bits by writing a 1 to it. 


0 = No Port Owner bit change. 

1 = Bits 29:22, 27:22 correspond to the Port Owner bits for ports 1 (22) through 6 (27) 
or 8 (29). These bits are set to 1 when the associated Port Owner bits transition 
from 0 to 1 or 1 to O. 


SMI on PMCSR — R/WC. Software clears these bits by writing a 1 to it. 


0 = Power State bits Not modified. 
1 = Software modified the Power State bits in the Power Management Control/Status 
(PMCSR) register (D29:F7, D26:F7:54h). 


SMI on Async — R/WC. Software clears these bits by writing a 1 to it. 


0 = No Async Schedule Enable bit change 
1 = Async Schedule Enable bit transitioned from 1 to 0 or 0 to 1. 


SMI on Periodic — R/WC. Software clears this bit by writing a 1 it. 


0 = No Periodic Schedule Enable bit change. 
1 = Periodic Schedule Enable bit transitions from 1 to O or 0 to 1. 
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SMI on CF — R/WC. Software clears this bit by writing a 1 it. 


0 = No Configure Flag (CF) change. 
1 = Configure Flag (CF) transitions from 1 to 0 or 0 to 1. 


SMI on HCHalted — R/WC. Software clears this bit by writing a 1 it. 


0 = HCHalted did Not transition to 1 (as a result of the Run/Stop bit being cleared). 
1 = HCHalted transitions to 1 (as a result of the Run/Stop bit being cleared). 


SMI on HCReset — R/WC. Software clears this bit by writing a 1 it. 


0 = HCRESET did Not transitioned to 1. 
1 = HCRESET transitioned to 1. 


SMI on PortOwner Enable — R/W. 

0 = Disable. 

1 = Enable. When any of these bits are 1 and the corresponding SMI on PortOwner bits 
are 1, then the host controller will issue an SMI. Unused ports should have their 
corresponding bits cleared. 


SMI on PMSCR Enable — R/W. 
0 = Disable. 


1 = Enable. When this bit is 1 and SMI on PMSCR is 1, then the host controller will issue 
an SMI. 


SMI on Async Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is 1 and SMI on Async is 1, then the host controller will issue 
an SMI 


issue an SMI. 


SMI on CF Enable — R/W. 
0 = Disable. 


1 = Enable. When this bit is 1 and SMI on CF is 1, then the host controller will issue an 
SMI. 


SMI on HCHalted Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1 and SMI on HCHalted is 1, then the host controller will 
issue an SMI. 

SMI on HCReset Enable — R/W. 

0 = Disable. 


1 = Enable. When this bit is a 1 and SMI on HCReset is 1, then host controller will issue 
an SMI. 





SMI on Periodic Enable — R/W. 
3 0 = Disable. 
1 = Enable. When this bit is 1 and SMI on Periodic is 1, then the host controller will 
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17.41.29 


17.1.30 


17.1.31 


ACCESS CNTL—Access Control Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 80h Attribute: R/W 


Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Reserved 


WRT_RDONLY — R/W. When set to 1, this bit enables a select group of normally read- 


only registers in the EHC function to be written by software. Registers that may only be 
written when this mode is entered are noted in the summary tables and detailed 
description as “Read/Write-Special”. The registers fall into two categories: 

1. System-configured parameters, and 

2: Status bits 





EHCIIR1—EHCI Initialization Register 1 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 84h Attribute: R/W 
Default Value: Olh Size: 8 bits 


prs [resend 
Go Pre-fetch Based Pause Disable — R/W. 


0 = Pre-fetch Based Pause is enabled. 
1 = Pre-fetch Based Pause is disabled 


FLR_C!lD—Function Level Reset Capability ID 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 98h Attribute: RO 


Default Value: 09h Size: 8 bits 
Function Level Reset: No 


Lo 


Capability |D — RO. 





13h = If FLRCSSEL = 0 
09h (Vendor Specific Capability) = If FLRCSSEL = 1 
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17.1.32 


17.1.33 


674 


FLR_NEXT—Function Level Reset Next Capability Pointer 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 99h Attribute: RO 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


a 





A value of 00h in this register indicates this is the last capability field. 


FLR_CLV—Function Level Reset Capability Length and 
Version 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: 9Ah-9Bh Attribute: R/WO, RO 
Default Value: 2006h Size: 16 bits 
Function Level Reset: No 


When FLRCSSEL = ‘0’ this register is defined as follows: 


ee 


FLR Capability — R/WO. 
1 = Support for Function Level Reset (FLR). 


TXP Capability — R/WO. 
1 = Support for Transactions Pending (TXP) bit. TXP must be supported if FLR is 
supported. 


Capability Length — RO. This field indicates the # of bytes of this vendor specific 
capability as required by the PCI specification. It has the value of O6h for the FLR 
capability. 


Vendor Specific Capability 1D — RO. A value of 2h in this field identifies this 
capability as Function Level Reset. 


Capability Length — RO. This field indicates the # of bytes of this vendor specific 
capability as required by the PCI specification. It has the value of O6h for the FLR 
capability. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


| ® 
EHCI Controller Registers (D29:F7, D26:F7) [ n tel ) 


17.1.34 FLR_CTRL—Function Level Reset Control Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 9Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


7:1 Reserved 


Initiate FLR — R/W. This bit is used to initiate FLR transition. A write of ‘1’ initiates FLR 
transition. Since hardware must not respond to any cycles until FLR completion, the 
value read by software from this bit is always ‘0’. 





17.1.35 FLR_STS—Function Level Reset Status Register 
(USB EHC! —D29:F7, D26:F7) 


Address Offset: 9Dh Attribute: RO 


Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Lo 


Transactions Pending (TXP) — RO. 
0 = Completions for all non-posted requests have been received. 


1 = Controller has issued non-posted requests which have no bee completed. 





17.1.36 EHCIIR2—EHCI Initialization Register 2 
(USB EHCI —D29:F7, D26:F7) 


Address Offset: FCh Attribute: R/W 
Default Value: 20001706h Size: 32 bits 


se 
[29_[eHCHIRE Field 2 — NW. BIOS musseHSRR CS 
[a7 [enclin2 Feld a — WW. BIOS musseTSRR CS 


29 
17 
EHCIIR2 Field 3— R/W. BIOS must set this field to 10b 
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Note: 


Note: 


17.2.1 


Note: 


Note: 


Table 17-2. 


676 


Memory-Mapped I/ O Registers 


The EHCI memory-mapped I/O space is composed of two sets of registers: Capability 
Registers and Operational Registers. 


The ICH9 EHC! controller will not accept memory transactions (neither reads nor 
writes) as a target that are locked transactions. The locked transactions should not be 
forwarded to PCI as the address space is known to be allocated to USB. 


When the EHCI function is in the D3 PCI power state, accesses to the USB 2.0 memory 
range are ignored and result a master abort. Similarly, if the Memory Space Enable 
(MSE) bit (D29:F7, D26:F7:04h, bit 1) is not set in the Command register in 
configuration space, the memory range will not be decoded by the ICH9 enhanced host 
controller (EHC). If the MSE bit is not set, then the ICH9 must default to allowing any 
memory accesses for the range specified in the BAR to go to PCI. This is because the 
range may not be valid and, therefore, the cycle must be made available to any other 
targets that may be currently using that range. 


Host Controller Capability Registers 


These registers specify the limits, restrictions and capabilities of the host controller 
implementation. Within the host controller capability registers, only the structural 
parameters register is writable. These registers are implemented in the suspend well 
and is only reset by the standard suspend-well hardware reset, not by HCRESET or the 
D3-to-DO reset. 


Note that the EHC! controller does not support as a target memory transactions that 
are locked transactions. Attempting to access the EHC! controller Memory-Mapped I/O 
space using locked memory transactions will result in undefined behavior. 


Note that when the USB2 function is in the D3 PCI power state, accesses to the USB2 
memory range are ignored and will result in a master abort Similarly, if the Memory 
Space Enable (MSE) bit is not set in the Command register in configuration space, the 
memory range will not be decoded by the Enhanced Host Controller (EHC). If the MSE 
bit is not set, then the EHC will not claim any memory accesses for the range specified 
in the BAR. 


Enhanced Host Controller Capability Registers 


MEM_ BASE 
ict oes A dE 


| CAPLENGTH | | Capabilities Registers Length | Capabilities Registers Length Length 


02h-03h HCIVERSION Host Controller Interface Version 0100h 
Number 


00103206h 
Host Controller Structural (D29:F7) R/W 
GaGa BES PANS Parameters 00102205 | (special), RO 
(D26:F7) 
osh-oBh | HCcpARAMs | Host Controller Capability 00006871h FRO 
Parameters 


NOTE: “Read/Write Special” means that the register is normally read-only, but may be written 
when the WRT_RDONLY bit is set. Because these registers are expected to be programmed 
by BIOS during initialization, their contents must not get modified by HCRESET or D3-to- 
DO internal reset. 
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17.2.1.1 CAPLENGTH—Capability Registers Length Register 


Offset: MEM_BASE + 00h Attribute: RO 
Default Value: 20h Size: 8 bits 


Pe cine 


Capability Register Length Value — RO. This register is used as an offset to add to 


the Memory Base Register (D29:F7, D26:F7:10h) to find the beginning of the 
Operational Register Space. This field is hardwired to 20h indicating that the Operation 
Registers begin at offset 20h. 





17.2.1.2 HCI VERSI ON—Host Controller Interface Version Number 


Register 
Offset: MEM_BASE + 02h-03h Attribute: RO 
Default Value: 0100h Size: 16 bits 


2 rrr 


Host Controller Interface Version Number — RO. This is a two-byte register 


containing a BCD encoding of the version number of interface that this host controller 
interface conforms. 
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HCSPARAMS—Host Controller Structural Parameters 


Offset: MEM_BASE + 04h-07h Attribute: R/W, RO 

Default Value: 00103206h (D29:F7) Size: 32 bits 
00103206h (D26:F7) 

Function Level Reset: No 


This register is reset by a suspend well reset and not a D3-to-DO reset or HCRESET. 


| ae 


23:20 Debug Port Number (DP_N) — RO. Hardwired to 1h indicating that the Debug Port is 
, on the lowest numbered port on the EHCI. 


Number of Companion Controllers (N_CC) — R/W. This field indicates the number of 
companion controllers associated with this USB EHCI host controller. 
A 0 in this field indicates there are no companion host controllers. Port-ownership hand- 
off is not supported. Only high-speed devices are supported on the host controller root 
ports. 
A value of 1 or more in this field indicates there are companion USB UHCI host 

15:12 


controller(s). Port-ownership hand-offs are supported. High, Full- and Low-speed 
devices are supported on the host controller root ports. 

The ICH9 allows the default value of 3h (D29) or 3h (D26) to be over-written by BIOS. 
When removing classic controllers, they must be disabled in the following order: 
Function 3, Function 2, Function 1, and Function 0, which correspond to ports 11:10, 
5:4, 3:2, and 1:0, respectively for Device 29. For Device 26 the following order is 
Function 2, Function 1 then Function 0, which correspond to ports 11:10, 9:8 and 7:6, 
respectively. 


Number of Ports per Companion Controller (N_PCC) — RO. Hardwired to 2h. This 
field indicates the number of ports supported per companion host controller. It is used to 
indicate the port routing configuration to system software. 


Reserved. These bits are reserved and default to 0. 


N_PORTS — R/W. This field specifies the number of physical downstream ports 

implemented on this host controller. The value of this field determines how many port 

registers are addressable in the Operational Register Space. Valid values are in the 
3:0 


range of 1h to Fh. 

The ICH9 reports 6h for D29 and 6h for D26 by default. However, software may write a 
value less than the default for some platform configurations. A 0 in this field is 
undefined. 





NOTE: This register is writable when the WRT_RDONLY bit is set. 
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17.2.1.4 


HCCPARAMS—Host Controller Capability Parameters 


Register 
Offset: MEM_BASE + 08h-OBh Attribute: RO 
Default Value: 00006871h Size: 32 bits 


So 
31:18 | Reserved 
17 
16 
15:8 
7:4 
3 
2 
1 


Asynchronous Schedule Update Capability (ASUC) — R/W. There is no 
functionality associated with this bit. 


Periodic Schedule Update Capability (PSUC) — RO. This field is hardwired to Ob to 
indicate that the EHC hardware supports the Periodic Schedule Update Event Flag in the 
USB2.0_CMD register. 


EHCI Extended Capabilities Pointer (EECP) — RO. This field is hardwired to 68h, 
indicating that the EHCI capabilities list exists and begins at offset 68h in the PCI 
configuration space. 


Isochronous Scheduling Threshold — RO. This field indicates, relative to the 
current position of the executing host controller, where software can reliably update the 
isochronous schedule. When bit 7 is 0, the value of the least significant 3 bits indicates 
the number of micro-frames a host controller hold a set of isochronous data structures 
(one or more) before flushing the state. When bit 7 is a 1, then host software assumes 
the host controller may cache an isochronous data structure for an entire frame. Refer 
to the EHCI specification for details on how software uses this information for 
scheduling isochronous transfers. 


This field is hardwired to 7h. 


Asynchronous Schedule Park Capability — RO. This bit is hardwired to 0 indicating 
that the host controller does not support this optional feature 


Programmable Frame List Flag — RO. 

0 = System software must use a frame list length of 1024 elements with this host 
controller. The USB2.0_CMD register (D29:F7, D26:F7: CAPLENGTH + 20h, bits 
3:2) Frame List Size field is a read-only register and must be set to 0. 

1 = System software can specify and use a smaller frame list and configure the host 
controller via the USB2.0_CMD register Frame List Size field. The frame list must 
always be aligned on a 4K page boundary. This requirement ensures that the frame 
list is always physically contiguous. 


interpretation: 


0 = Data structures using 32-bit address memory pointers 
1 = Data structures using 64-bit address memory pointers 


This bit is hardwired to 1. 





64-bit Addressing Capability — RO. This field documents the addressing range 
capability of this implementation. The value of this field determines whether software 
should use the 32-bit or 64-bit data structures. Values for this field have the following 


NOTE: ICH9 supports 64 bit addressing only. 


Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 679 


| | ® 
| Nn tel EHCI Controller Registers (D29:F7, D26:F7) 


17.2.2 Host Controller Operational Registers 


This section defines the enhanced host controller operational registers. These registers 
are located after the capabilities registers. The operational register base must be 
dword-aligned and is calculated by adding the value in the first capabilities register 
(CAPLENGTH) to the base address of the enhanced host controller register address 
space (MEM_BASE). Since CAPLENGTH is always 20h, Table 17-3 already accounts for 
this offset. All registers are 32 bits in length. 


Table 17-3. Enhanced Host Controller Operational Register Address Map 
MEM_BASE : Special 
20h- 23h USB2.0_CMD USB 2.0 Command |00080000h}| =——s|_—aR/W, RO 
24h- 27h USB2.0_STS USB 2.0 Status 00001000h}_ ~=——si}.s«&R/WC, RO 


28h-2Bh uSB2.0.INTR | USB 2.0 Interrupt | ggggoo00h R/W 
- Enable 
2Ch-2Fh FRINDEX rts cia 00000000h R/W 
Index 
Control Data 
30h-33h_ | CTRLDSSEGMENT 00000000h R/W, RO 
Structure Segment 
34h-37h_ | PERODICLISTBASE | Pelod Frame List | go ggggooh R/W 
Base Address 
R/W 
R/W 


Current 
38h-3Bh ASYNCLISTADDR | Asynchronous List 00000000h 
Address 
0 | Rw 
Port 0 Status and R/W, 
64h-67h PORTOSC 00003000h R/WC, RO 
0 F 


G0h- 63h a000000h 
a wn 
ee wn ome 


AOh-B3h Debug Port Oadetined See register 
Registers description 


Note: Software must read and write these registers using only dword accesses. These 
registers are divided into two sets. The first set at offsets MEM_BASE + 00:3Bh are 
implemented in the core power well. Unless otherwise noted, the core well registers are 
reset by the assertion of any of the following: 
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17.2.2.1 


¢ Core well hardware reset 
« HCRESET 
¢« D3-to-DO reset 
The second set at offsets MEM_BASE + 60h to the end of the implemented register 


space are implemented in the Suspend power well. Unless otherwise noted, the 
suspend well registers are reset by the assertion of either of the following: 


« Suspend well hardware reset 
« HCRESET 


USB2.0_ CMD—USB 2.0 Command Register 


Offset: MEM_BASE + 20-23h Attribute: R/W, RO 
Default Value: 00080000h Size: 32 bits 


a 


Interrupt Threshold Control — R/W. System software uses this field to select the 
maximum rate at which the host controller will issue interrupts. The only valid values 
are defined below. If software writes an invalid value to this register, the results are 
undefined. 
Value Maximum Interrupt I nterval 
00h Reserved 
Olh 1 micro-frame 
23:16 

02h 2 micro- frames 

04h 4 micro- frames 

O8h 8 micro-frames (default, equates to 1 ms) 

10h 16 micro-frames (2 ms) 

20h 32 micro-frames (4 ms) 

40h 64 micro-frames (8 ms) 


it. 
Periodic Schedule Prefetch Enable — R/W. This bit is used by software to enable the 
host controller to prefetch the periodic schedule even in CO. 
0 = Prefetch based pause enabled only when not in CO. 
1 = Prefetch based pause enable in CO. 
12 Once software has written a 1b to this bit to enable periodic schedule prefetching, it 


must disable prefecthing by writing a Ob to this bit whenever periodic schedule updates 
are about to begin. Software should continue to dynamically disable and re-enable the 
prefetcher surrounding any updates to the periodic scheduler (i.e. until the host 
controller has been reset via a HCRESET). 


Unimplemented Asynchronous Park Mode Bits — RO. Hardwired to 000b indicating the 
host controller does not support this optional feature. 


Light Host Controller Reset — RO. Hardwired to 0. The ICH9 does not implement this 
optional reset. 
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Interrupt on Async Advance Doorbell — R/W. This bit is used as a doorbell by 
software to tell the host controller to issue an interrupt the next time it advances 
asynchronous schedule. 

0 = The host controller sets this bit to a O after it has set the Interrupt on Async 
Advance status bit (D29:F7, D26:F7:CAPLENGTH + 24h, bit 5) in the USB2.0_STS 
register toa 1. 

1 = Software must write a 1 to this bit to ring the doorbell. When the host controller 
has evicted all appropriate cached schedule state, it sets the Interrupt on Async 
Advance status bit in the USB2.0_STS register. If the Interrupt on Async Advance 
Enable bit in the USB2.0_INTR register (D29:F7, D26:F7:CAPLENGTH + 28h, bit 5) 
is a 1 then the host controller will assert an interrupt at the next interrupt 
threshold. See the EHCI specification for operational details. 


NOTE: Software should not write a 1 to this bit when the asynchronous schedule is 
inactive. Doing so will yield undefined results. 


Asynchronous Schedule Enable — R/W. This bit controls whether the host controller 
skips processing the Asynchronous Schedule. 

0 = Do not process the Asynchronous Schedule 

1 = Use the ASYNCLISTADDR register to access the Asynchronous Schedule. 

Periodic Schedule Enable — R/W. This bit controls whether the host controller skips 
processing the Periodic Schedule. 


0 = Do not process the Periodic Schedule 
1 = Use the PERIODICLISTBASE register to access the Periodic Schedule. 


Frame List Size — RO. The |CH9 hardwires this field to 00b because it only supports 
the 1024-element frame list size. 


Host Controller Reset (HCRESET) — R/W. This control bit used by software to reset 
the host controller. The effects of this on root hub registers are similar to a Chip 
Hardware Reset (i.e., RSMRST# assertion and PWROK deassertion on the ICH9). 
When software writes a 1 to this bit, the host controller resets its internal pipelines, 
timers, counters, state machines, etc. to their initial value. Any transaction currently in 
progress on USB is immediately terminated. A USB reset is not driven on downstream 
ports. 


NOTE: PCI configuration registers and Host controller capability registers are not 
effected by this reset. 

All operational registers, including port registers and port state machines are set to 

their initial values. Port ownership reverts to the companion host controller(s), with the 

side effects described in the EHCI spec. Software must re-initialize the host controller in 

order to return the host controller to an operational state. 

This bit is set to 0 by the host controller when the reset process is complete. Software 

cannot terminate the reset process early by writing a 0 to this register. 

Software should not set this bit to a 1 when the HCHalted bit (D29:F7, 

D26:F7:CAPLENGTH + 24h, bit 12) in the USB2.0_STS register is a 0. Attempting to 

reset an actively running host controller will result in undefined behavior. This reset me 

be used to leave EHCI port test modes. 
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Run/ Stop (RS) — R/W. 

0 = Stop (default) 

1 = Run. When set to a 1, the Host controller proceeds with execution of the schedule. 
The Host controller continues execution as long as this bit is set. When this bit is 
set to 0, the Host controller completes the current transaction on the USB and then 
halts. The HCHalted bit in the USB2.0_STS register indicates when the Host 
controller has finished the transaction and has entered the stopped state. 


Software should not write a 1 to this field unless the host controller is in the Halted 
state (i.e., HCHalted in the USBSTS register is a 1). The Halted bit is cleared 
immediately when the Run bit is set. 


The following table explains how the different combinations of Run and Halted should 
be interpreted: 


Run/ Stop Halted Interpretation 
Ob Ob In the process of halting 
Ob 1b Halted 
1b Ob Running 


1b 1b Invalid - the HCHalted bit clears immediately 


Memory read cycles initiated by the EHC that receive any status other than Successful 
will result in this bit being cleared. 





NOTE: The Command Register indicates the command to be executed by the serial bus host 
controller. Writing to the register causes a command to be executed. 
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17.2.2.2 USB2.0_STS—USB 2.0 Status Register 


Offset: MEM_BASE + 24h-27h Attribute: R/WC, RO 
Default Value: 00001000h Size: 32 bits 


This register indicates pending interrupts and various states of the Host controller. The 
status resulting from a transaction on the serial bus is not indicated in this register. See 
the Interrupts description in section 4 of the EHCI specification for additional 
information concerning USB 2.0 interrupt conditions. 


Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 has 
no effect. 


a 


Asynchronous Schedule Status — RO. This bit reports the current real status of the 
Asynchronous Schedule. 

0 = Status of the Asynchronous Schedule is disabled. (Default) 

1 = Status of the Asynchronous Schedule is enabled. 


NOTE: The Host controller is not required to immediately disable or enable the 
Asynchronous Schedule when software transitions the Asynchronous Schedule 
Enable bit (D29:F7, D26:F7: CAPLENGTH + 20h, bit 5) in the USB2.0_CMD 
register. When this bit and the Asynchronous Schedule Enable bit are the same 
value, the Asynchronous Schedule is either enabled (1) or disabled (0). 


Periodic Schedule Status — RO. This bit reports the current real status of the Periodic 

Schedule. 

0 = Status of the Periodic Schedule is disabled. (Default) 

1 = Status of the Periodic Schedule is enabled. 

14 

NOTE: The Host controller is not required to immediately disable or enable the Periodic 
Schedule when software transitions the Periodic Schedule Enable bit (D29:F7, 
D26:F7:CAPLENGTH + 20h, bit 4) in the USB2.0_CMD register. When this bit and 


the Periodic Schedule Enable bit are the same value, the Periodic Schedule is 
either enabled (1) or disabled (0). 


Reclamation — RO. This read-only status bit is used to detect an empty asynchronous 
schedule. The operational model and valid transitions for this bit are described in 
Section 4 of the EHC! Specification. 


HCHalted — RO. 


0 = This bit is a O when the Run/Stop bit is a 1. 

1 = The Host controller sets this bit to 1 after it has stopped executing as a result of the 
Run/Stop bit being set to 0, either by software or by the Host controller hardware 
(e.g., internal error). (Default) 


Reserved 


Interrupt on Async Advance — R/WC. System software can force the host controller 
to issue an interrupt the next time the host controller advances the asynchronous 
schedule by writing a 1 to the Interrupt on Async Advance Doorbell bit (D29:F7, 
D26:F7:CAPLENGTH + 20h, bit 6) in the USB2.0_CMD register. This bit indicates the 
assertion of that interrupt source. 
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0 = No serious error occurred during a host system access involving the Host controller 
module 

1 = The Host controller sets this bit to 1 when a serious error occurs during a host 
system access involving the Host controller module. A hardware interrupt is 
generated to the system. Memory read cycles initiated by the EHC that receive any 
status other than Successful will result in this bit being set. 


When this error occurs, the Host controller clears the Run/Stop bit in the 
USB2.0_CMDregister (D29:F7, D26:F7:CAPLENGTH + 20h, bit 0) to prevent further 
execution of the scheduled TDs. A hardware interrupt is generated to the system (if 
enabled in the Interrupt Enable Register). 


Frame List Rollover — R/WC. 

0 = No Frame List Index rollover from its maximum value to 0. 

1 = The Host controller sets this bit to a 1 when the Frame List Index (see Section) rolls 
over from its maximum value to 0. Since the ICH9 only supports the 1024-entry 
Frame List Size, the Frame List Index rolls over every time FRNUM13 toggles. 


Port Change Detect — R/WC. This bit is allowed to be maintained in the Auxiliary 
power well. Alternatively, it is also acceptable that on a D3 to DO transition of the EHCI 
HC device, this bit is loaded with the OR of all of the PORTSC change bits (including: 


Force port resume, overcurrent change, enable/disable change and connect status 
change). Regardless of the implementation, when this bit is readable (i.e., in the DO 
state), it must provide a valid view of the Port Status registers. 


0 = No change bit transition from a 0 to 1 or No Force Port Resume bit transition from 0 
to 1 as a result of aJ-K transition detected on a suspended port. 

1 = The Host controller sets this bit to 1 when any port for which the Port Owner bit is 
set to 0 has a change bit transition from a 0 to 1 or a Force Port Resume bit 
transition from 0 to 1 as a result of a J-K transition detected on a suspended port. 


USB Error Interrupt (USBERRINT) — R/WC. 

0 = No error condition. 

1 = The Host controller sets this bit to 1 when completion of a USB transaction results in 
an error condition (e.g., error counter underflow). If the TD on which the error 
interrupt occurred also had its |OC bit set, both this bit and Bit 0 are set. See the 
EHCI specification for a list of the USB errors that will result in this interrupt being 
asserted. 


USB Interrupt (USBINT) — R/WC. 


0 = No completion of a USB transaction whose Transfer Descriptor had its IOC bit set. 
No short packet is detected. 

1 = The Host controller sets this bit to 1 when the cause of an interrupt is a completion 
of a USB transaction whose Transfer Descriptor had its |OC bit set. 
The Host controller also sets this bit to 1 when a short packet is detected (actual 
number of bytes received was less than the expected number of bytes). 
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17.2.2.3 USB2.0_INTR—USB 2.0 Interrupt Enable Register 


Offset: MEM_BASE + 28h-2Bh Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register enables and disables reporting of the corresponding interrupt to the 
software. When a bit is set and the corresponding interrupt is active, an interrupt is 
generated to the host. Interrupt sources that are disabled in this register still appear in 
the USB2.0_STS Register to allow the software to poll for events. Each interrupt enable 
bit description indicates whether it is dependent on the interrupt threshold mechanism 
(see Section 4 of the EHCI specification), or not. 


Interrupt on Async Advance Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1, and the Interrupt on Async Advance bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 5) in the USB2.0_STS register is a 1, the host 
controller will issue an interrupt at the next interrupt threshold. The interrupt is 
acknowledged by software clearing the Interrupt on Async Advance bit. 


Host System Error Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1, and the Host System Error Status bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 4) in the USB2.0_STS register is a 1, the host 
controller will issue an interrupt. The interrupt is acknowledged by software 
clearing the Host System Error bit. 


Frame List Rollover Enable — R/W. 
0 = Disable. 
3 1 = Enable. When this bit is a 1, and the Frame List Rollover bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 3) in the USB2.0_STS register is a 1, the host 
controller will issue an interrupt. The interrupt is acknowledged by software 


clearing the Frame List Rollover bit. 


Port Change Interrupt Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1, and the Port Change Detect bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 2) in the USB2.0_STS register is a 1, the host 
controller will issue an interrupt. The interrupt is acknowledged by software 
clearing the Port Change Detect bit. 


USB Error Interrupt Enable — R/W. 


0 = Disable. 

1 = Enable. When this bit is a 1, and the USBERRINT bit (D29:F7, D26:F7: CAPLENGTH 
+ 24h, bit 1) in the USB2.0_STS register is a 1, the host controller will issue an 
interrupt at the next interrupt threshold. The interrupt is acknowledged by software 
by clearing the USBERRINT bit in the USB2.0_STS register. 


USB Interrupt Enable — R/W. 

0 = Disable. 

1 = Enable. When this bit is a 1, and the USBINT bit (D29:F7, D26:F7:CAPLENGTH + 
24h, bit 0) in the USB2.0_STS register is a 1, the host controller will issue an 
interrupt at the next interrupt threshold. The interrupt is acknowledged by software 
by clearing the USBINT bit in the USB2.0_ STS register. 
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17.2.2.4 


Note: 


FRINDEX—Frame Index Register 


Offset: MEM_BASE + 2Ch-2Fh Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


The SOF frame number value for the bus SOF token is derived or alternatively managed 
from this register. Refer to Section 4 of the EHCI specification for a detailed explanation 
of the SOF value management requirements on the host controller. The value of 
FRINDEX must be within 125 us (1 micro-frame) ahead of the SOF token value. The 
SOF value may be implemented as an 11-bit shadow register. For this discussion, this 
shadow register is 11 bits and is named SOFV. SOFV updates every 8 micro-frames 

(1 millisecond). An example implementation to achieve this behavior is to increment 
SOFV each time the FRINDEX[2:0] increments from 0 to 1. 


Software must use the value of FRINDEX to derive the current micro-frame number, 
both for high-speed isochronous scheduling purposes and to provide the get micro- 
frame number function required to client drivers. Therefore, the value of FRINDEX and 
the value of SOFV must be kept consistent if chip is reset or software writes to 
FRINDEX. Writes to FRINDEX must also write-through FRI NDEX[13:3] to 
SOFV[10:0]. In order to keep the update as simple as possible, software should never 
write a FRINDEX value where the three least significant bits are 111b or OOOb. 


This register is used by the host controller to index into the periodic frame list. The 
register updates every 125 microseconds (once each micro-frame). Bits [12:3] are 
used to select a particular entry in the Periodic Frame List during periodic schedule 
execution. The number of bits used for the index is fixed at 10 for the |CH9 since it only 
supports 1024-entry frame lists. This register must be written as a dword. Word and 
byte writes produce undefined results. This register cannot be written unless the Host 
controller is in the Halted state as indicated by the HCHalted bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 12). A write to this register while the Run/Stop bit 
(D29:F7, D26:F7: CAPLENGTH + 20h, bit 0) is set to a 1 (USB2.0_CMD register) 
produces undefined results. Writes to this register also effect the SOF value. See 
Section 4 of the EHCI specification for details. 


a 


Bits [12:3] are used for the Frame List current index. This means that each location of 
the frame list is accessed 8 times (frames or micro-frames) before moving to the next 
index. 





Frame List Current Index/ Frame Number — R/W. The value in this register 
increments at the end of each time frame (e.g., micro-frame). 
13:0 
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17.2.2.5 


17.2.2.6 


688 


CTRLDSSEGMENT—Control Data Structure Segment 


Register 
Offset: MEM_BASE + 30h-33h Attribute: R/W, RO 
Default Value: | 00000000h Size: 32 bits 


This 32-bit register corresponds to the most significant address bits [63:32] for all 
EHCI data structures. Since the |CH9 hardwires the 64-bit Addressing Capability field in 
HCCPARAMS to 1, then this register is used with the link pointers to construct 64-bit 
addresses to EHCI control data structures. This register is concatenated with the link 
pointer from either the PERIODICLISTBASE, ASYNCLISTADDR, or any control data 
structure link field to construct a 64-bit address. This register allows the host software 
to locate all control data structures within the same 4 GB memory segment. 


a 


31:12 Upper Address[ 63:44] — RO. Hardwired to 0s. The |CH9 EHC is only capable of 


generating addresses up to 16 terabytes (44 bits of address). 





11:0 Upper Address[43:32] — R/W. This 12-bit field corresponds to address bits 43:32 
: when forming a control data structure address. 


PERI ODI CLISTBASE—Periodic Frame List Base Address 
Register 


Offset: MEM_BASE + 34h-37h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This 32-bit register contains the beginning address of the Periodic Frame List in the 
system memory. Since the |CH9 host controller operates in 64-bit mode (as indicated 
by the 1 in the 64-bit Addressing Capability field in the HCCSPARAMS register) (offset 
08h, bit 0), then the most significant 32 bits of every control data structure address 
comes from the CTRLDSSEGMENT register. HCD loads this register prior to starting the 
schedule execution by the host controller. The memory structure referenced by this 
physical memory pointer is assumed to be 4-Kbyte aligned. The contents of this 
register are combined with the Frame Index Register (FRINDEX) to enable the Host 
controller to step through the Periodic Frame List in sequence. 


a 


31:12 Base Address (Low) — R/W. These bits correspond to memory address signals 


[31:12], respectively. 
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17.2.2.7 ASYNCLISTADDR—Current Asynchronous List Address 


Register 
Offset: MEM_BASE + 38h-3Bh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


This 32-bit register contains the address of the next asynchronous queue head to be 
executed. Since the ICH9 host controller operates in 64-bit mode (as indicated by a 1 in 
64-bit Addressing Capability field in the HCCPARAMS register) (offset 08h, bit 0), then 
the most significant 32 bits of every control data structure address comes from the 
CTRLDSSEGMENT register (offset 08h). Bits [4:0] of this register cannot be modified by 
system software and will always return Os when read. The memory structure 
referenced by this physical memory pointer is assumed to be 32-byte aligned. 


FE 


Link Pointer Low (LPL) — R/W. These bits correspond to memory address signals 


[31:5], respectively. This field may only reference a Queue Head (QH). 
17.2.2.8 CONFI GFLAG—Configure Flag Register 


Offset: MEM_BASE + 60h-63h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 





This register is in the suspend power well. It is only reset by hardware when the 
suspend power is initially applied or in response to a host controller reset. 


fe Configure Flag (CF) — R/W. Host software sets this bit as the last action in its process 


of configuring the Host controller. This bit controls the default port-routing control logic. 
Bit values and side-effects are listed below. See section 4 of the EHCI spec for 
operation details. 


0 = Port routing control logic default-routes each port to the UHCIs (default). 
1 = Port routing control logic default-routes all ports to this host controller. 
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17.2.2.9 


690 


PORTSC—Port N Status and Control Register 


Offset: Port 0, Port 6: MEM_BASE + 64h-67h 
Port 1, Port 7: MEM_BASE + 68-6Bh 
Port 2, Port 8: MEM_BASE + 6C-6Fh 
Port 3, Port 9: MEM_BASE + 70-73h 
Port 4: Port 10: MEM_BASE + 74-77h 
Port 5: Port 11: MEM_BASE + 78-7Bh 
Port 6: MEM_BASE + 7Ch-7Bh 
Port 7: MEM_BASE + 80h-83h 
Attribute: R/W, R/WC, RO 
Default Value: | 00003000h Size: 32 bits 


A host controller must implement one or more port registers. Software uses the N_Port 
information from the Structural Parameters Register to determine how many ports 
need to be serviced. All ports have the structure defined below. Software must not 
write to unreported Port Status and Control Registers. 


This register is in the suspend power well. It is only reset by hardware when the 
suspend power is initially applied or in response to a host controller reset. The initial 
conditions of a port are: 


¢ No device connected 
¢ Port disabled. 


When a device is attached, the port state transitions to the attached state and system 
software will process this as with any status change notification. Refer to Section 4 of 
the EHCI specification for operational requirements for how change events interact with 
port suspend mode. 


Panton 
TEE 


Wake on Overcurrent Enable (WKOC_E) — R/W. 

0 = Disable. (Default) 

1 = Enable. Writing this bit to a 1 enables the setting of the PME Status bit in the Power 
Management Control/Status Register (offset 54, bit 15) when the overcurrent 
Active bit (bit 4 of this register) is set. 

Wake on Disconnect Enable (WKDSCNNT_E) — R/W. 

0 = Disable. (Default) 

1 = Enable. Writing this bit to a 1 enables the setting of the PME Status bit in the Power 
Management Control/Status Register (offset 54, bit 15) when the Current Connect 
Status changes from connected to disconnected (i.e., bit 0 of this register changes 
from 1 to 0). 


22 
21 
Wake on Connect Enable (WKCNNT_E) — R/W. 
0 = Disable. (Default) 
20 1 = Enable. Writing this bit to a 1 enables the setting of the PME Status bit in the Power 


Management Control/Status Register (offset 54, bit 15) when the Current Connect 
Status changes from disconnected to connected (i.e., bit 0 of this register changes 
from 0 to 1). 
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Description 


Port Test Control — R/W. When this field is Os, the port is NOT operating in a test 
mode. A non-zero value indicates that it is operating in test mode and the specific test 
mode is indicated by the specific value. The encoding of the test mode bits are (0110b 
- 1111b are reserved): 


Value Maximum Interrupt I nterval 
0000b Test mode not enabled (default) 
0001b Test J_ STATE 

0010b Test K_STATE 

0011b Test SEO_NAK 

0100b Test Packet 

0101b FORCE_ENABLE 


Refer to USB Specification Revision 2.0, Chapter 7 for details on each test mode. 


Port Owner — R/W. This bit unconditionally goes to a 0 when the Configured Flag bit 
in the USB2.0_CMD register makes a 0 to 1 transition. 


System software uses this field to release ownership of the port to a selected host 
controller (in the event that the attached device is not a high-speed device). Software 
writes a 1 to this bit when the attached device is not a high-speed device. A 1 in this bit 
means that a companion host controller owns and controls the port. See Section 4 of 
the EHCI Specification for operational details. 


2 Port Power (PP) — RO. Read-only with a value of 1. This indicates that the port does 
have power. 


Line Status— RO.These bits reflect the current logical levels of the D+ (bit 11) and D- 
(bit 10) signal lines. These bits are used for detection of low-speed USB devices prior to 
the port reset and enable sequence. This field is valid only when the port enable bit is 0 
and the current connect status bit is set to a 1. 

00 = SEO 

10 = J-state 

01 = K-state 

11 = Undefined 


sfReseved SOS 
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Ss 


Port Reset — R/W. When software writes a 1 to this bit (from a 0), the bus reset 
sequence as defined in the USB Specification, Revision 2.0 is started. Software writes a 
0 to this bit to terminate the bus reset sequence. Software must keep this bit at a 1 
long enough to ensure the reset sequence completes as specified in the USB 
Specification, Revision 2.0. 

1 = Port is in Reset. 


0 = Port is not in Reset. 


NOTE: When software writes a 0 to this bit, there may be a delay before the bit status 
changes to a 0. The bit status will not read as a O until after the reset has 
completed. If the port is in high-speed mode after reset is complete, the host 
controller will automatically enable this port (e.g., set the Port Enable bit to a 
1). A host controller must terminate the reset and stabilize the state of the port 
within 2 milliseconds of software transitioning this bit from 0 to 1. 


For example: if the port detects that the attached device is high-speed during 
reset, then the host controller must have the port in the enabled state within 

2 ms of software writing this bit to a 0. The HCHalted bit (D29:F7, 
D26:F7:CAPLENGTH + 24h, bit 12) in the USB2.0_STS register should be a 0 
before software attempts to use this bit. The host controller may hold Port Reset 
asserted to a 1 when the HCHalted bit is a 1. This bit is 0 if Port Power is 0 


System software should not attempt to reset a port if the HCHalted bit in the 
USB2.0_STS register is a 1. Doing so will result in undefined behavior. 


Suspend — R/W. 

0 = Port not in suspend state. (Default) 

1 = Port in suspend state. 

Port Enabled Bit and Suspend bit of this register define the port states as follows: 


Port Enabled Suspend Port State 
Xx Disabled 
0 Enabled 
1 Suspend 


When in suspend state, downstream propagation of data is blocked on this port, except 
for port reset. Note that the bit status does not change until the port is suspended and 
that there may be a delay in suspending a port depending on the activity on the port. 

The host controller will unconditionally set this bit to a 0 when software sets the Force 


Port Resume bit to a 0 (from a 1). A write of 0 to this bit is ignored by the host 
controller. 


If host software sets this bit to a 1 when the port is not enabled (i.e., Port enabled bit is 
a 0) the results are undefined. 





692 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 


® 
EHCI Controller Registers (D29:F7, D26:F7) j n tel 


Description 


Force Port Resume — R/W. 

0 = No resume (K-state) detected/driven on port. (Default) 

1 = Resume detected/driven on port. Software sets this bit to a 1 to drive resume 
signaling. The Host controller sets this bit to a 1 if a J-to-K transition is detected 
while the port is in the Suspend state. When this bit transitions to a 1 because a J- 
to-K transition is detected, the Port Change Detect bit (D29:F7, 

D26:F7: CAPLENGTH + 24h, bit 2) in the USB2.0_STS register is also set to a 1. If 
software sets this bit to a 1, the host controller must not set the Port Change 
Detect bit. 


NOTE: When the EHCI controller owns the port, the resume sequence follows the 
defined sequence documented in the USB Specification, Revision 2.0. The 
resume signaling (Full-speed 'K') is driven on the port as long as this bit 
remains a 1. Software must appropriately time the Resume and set this bit to a 
0 when the appropriate amount of time has elapsed. Writing a O (from 1) 
causes the port to return to high-speed mode (forcing the bus below the port 
into a high-speed idle). This bit will remain a 1 until the port has switched to the 
high-speed idle. 

Overcurrent Change — R/WC. The functionality of this bit is not dependent upon the 

port owner. Software clears this bit by writing a 1 to it. 

0 = No change. (Default) 

1 = There is a change to Overcurrent Active. 


Overcurrent Active — RO. 


0 = This port does not have an overcurrent condition. (Default) 

1 = This port currently has an overcurrent condition. This bit will automatically 
transition from 1 to 0 when the over current condition is removed. The ICH9 
automatically disables the port when the overcurrent active bit is 1. 


Port Enable/ Disable Change — R/WC. For the root hub, this bit gets set to a 1 only 
when a port is disabled due to the appropriate conditions existing at the EOF2 point 
(See Chapter 11 of the USB Specification for the definition of a port error). This bit is 
not set due to the Disabled-to-Enabled transition, nor due to a disconnect. Software 
clears this bit by writing a 1 to it. 


0 = No change in status. (Default). 
1 = Port enabled/disabled status has changed. 


Port Enabled/ Disabled — R/W. Ports can only be enabled by the host controller as a 
part of the reset and enable. Software cannot enable a port by writing a 1 to this bit. 
Ports can be disabled by either a fault condition (disconnect event or other fault 
condition) or by host software. Note that the bit status does not change until the port 
state actually changes. There may be a delay in disabling or enabling a port due to 
other host controller and bus events. 

0 = Disable 

1 = Enable (Default) 


Connect Status Change — R/WC. This bit indicates a change has occurred in the 

port’s Current Connect Status. Software sets this bit to 0 by writing a 1 to it. 

0 = No change (Default). 

1 = Change in Current Connect Status. The host controller sets this bit for all changes 
to the port device connect status, even if system software has not cleared an 
existing connect status change. For example, the insertion status changes twice 
before system software has cleared the changed condition, hub hardware will be 
“setting” an already-set bit (i.e., the bit will remain set). 


Current Connect Status — RO. This value reflects the current state of the port, and 
may not correspond directly to the event that caused the Connect Status Change bit 
(Bit 1) to be set. 


0 = No device is present. (Default) 
1 = Device is present on port. 
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17.2.3 USB 2.0-Based Debug Port Register 


The Debug port’s registers are located in the same memory area, defined by the Base 
Address Register (MEM_BASE), as the standard EHCI registers. The base offset for the 
debug port registers (AOh) is declared in the Debug Port Base Offset Capability Register 
at Configuration offset 5Ah (D29:F7, D26:F7: offset 5Ah). The specific EHCI port that 
supports this debug capability (Port 0 for D29:F7 and Port 6 for D26:F7) is indicated by 
a 4-bit field (bits 20-23) in the HCSPARAMS register of the EHCI controller. The address 
map of the Debug Port registers is shown in Table 17-4. 


Table 17-4. Debug Port Register Address Map 


MEM_BASE + ; 
AO-A3h CNTL_STS Control/Status 00000000h R/WC, 


00000000 
A8-AFh DATABUF[7:0] | Data Buffer (Bytes 7:0) 00000000h R/W 





NOTES: 

1. All of these registers are implemented in the core well and reset by PLTRST#, EHC 
HCRESET, and a EHC D3-to-DO transition. 

2. The hardware associated with this register provides no checks to ensure that software 


programs the interface correctly. How the hardware behaves when programmed 
improperly is undefined. 
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17.2.3.1 


CNTL_STS—Control/ Status Register 


Offset: MEM_BASE + AOh Attribute: R/W, R/WC, RO 
Default Value: 00000000h Size: 32 bits 


OWNER_ CNT — R/W. 

0 = Ownership of the debug port is NOT forced to the EHCI controller (Default) 

1 = Ownership of the debug port is forced to the EHCI controller (i.e. immediately 
taken away from the companion Classic USB Host controller) If the port was 
already owned by the EHCI controller, then setting this bit has no effect. This bit 
overrides all of the ownership-related bits in the standard EHCI registers. 

ON 


ENABLED_CNT — R/W. 


0 = Software can clear this by writing a 0 to it. The hardware clears this bit for the 
same conditions where the Port Enable/Disable Change bit (in the PORTSC 
register) is set. (Default) 

1 = Debug port is enabled for operation. Software can directly set this bit if the port 
is already enabled in the associated PORTSC register (this is enforced by the 
hardware). 


DONE_ STS — R/WC. Software can clear this by writing a 1 to it. 

0 = Request Not complete 

1 = Set by hardware to indicate that the request is complete. 
15:12 LINK_ID_STS — RO. This field identifies the link interface. 

Oh = Hardwired. Indicates that it is a USB Debug Port. 


Reserved. 


IN_USE_CNT — R/W. Set by software to indicate that the port is in use. Cleared by 
software to indicate that the port is free and may be used by other software. This bit 
is cleared after reset. (This bit has no affect on hardware.) 


EXCEPTION_STS — RO. This field indicates the exception when the 
ERROR_GOOD#_STS bit is set. This field should be ignored if the 
ERROR_GOOD#_STS bit is 0. 
000 = No Error. (Default) 

Note: This should not be seen since this field should only be checked if there 


31 
30 
29 
28 
16 
11 
10 
9:7 


is an error. 


001 Transaction error: Indicates the USB 2.0 transaction had an error (CRC, bad 
PID, timeout, etc.) 


010 Hardware error. Request was attempted (or in progress) when port was 
suspended or reset. 


All Other combinations are reserved 


ERROR_GOOD#_ STS — RO. 

0 = Hardware clears this bit to 0 after the proper completion of a read or write. 
(Default) 

1 = Error has occurred. Details on the nature of the error are provided in the 


Exception field. 
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GO_ CNT — R/W. 
0 = Hardware clears this bit when hardware sets the DONE_STS bit. (Default) 
1 = Causes hardware to perform a read or write request. 


NOTE: Writing a 1 to this bit when it is already set may result in undefined behavior. 


WRITE_READ#_ CNT — R/W. Software clears this bit to indicate that the current 
request is a read. Software sets this bit to indicate that the current request is a write. 


0 = Read (Default) 
1 = Write 


DATA_LEN_CNT — R/W. This field is used to indicate the size of the data to be 
transferred. 

default = Oh. 

For write operations, this field is set by software to indicate to the hardware how 
many bytes of data in Data Buffer are to be transferred to the console. A value of Oh 
indicates that a zero-length packet should be sent. A value of 1-8 indicates 1-8 
bytes are to be transferred. Values 9-Fh are invalid and how hardware behaves if 
used is undefined. 

For read operations, this field is set by hardware to indicate to software how many 
bytes in Data Buffer are valid in response to a read operation. A value of Oh indicates 
that a zero length packet was returned and the state of Data Buffer is not defined. A 
value of 1-8 indicates 1-8 bytes were received. Hardware is not allowed to return 
values 9- Fh. 

The transferring of data always starts with byte 0 in the data area and moves toward 
byte 7 until the transfer size is reached. 





I. Software should do Read-Modify-Write operations to this register to preserve the contents 
of bits not being modified. This include Reserved bits. 

2. To preserve the usage of RESERVED bits in the future, software should always write the 
same value read from the bit until it is defined. Reserved bits will always return 0 when 
read. 
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17.2.3.2 


17.2.3.3 


17.2.3.4 


USBPID—USB PIDs Register 


Offset: MEM_BASE + A4h-A7h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


This Dword register is used to communicate PID information between the USB debug 
driver and the USB debug port. The debug port uses some of these fields to generate 
USB packets, and uses other fields to return PID information to the USB debug driver. 


2 
31:24 | Reserved. 


RECEIVED_PID_STS[23:16] — RO. Hardware updates this field with the received 
PID for transactions in either direction. When the controller is writing data, this field is 
updated with the handshake PID that is received from the device. When the host 
controller is reading data, this field is updated with the data packet PID (if the device 
sent data), or the handshake PID (if the device NAKs the request). This field is valid 


when the hardware clears the GO_DONE#_CNT bit. 


SEND_PID_CNT[15:8] — R/W. Hardware sends this PID to begin the data packet 
when sending data to USB (i.e., WRITE_READ#_CNT is asserted). Software typically 
sets this field to either DATAO or DATA1 PID values. 


TOKEN_PID_CNT[7:0] — R/W. Hardware sends this PID as the Token PID for each 
USB transaction. Software typically sets this field to either IN, OUT, or SETUP PID 
values. 





DATABUF[7:0]—Data Buffer Bytes[ 7:0] Register 


Offset: MEM_BASE + A8h-AFh Attribute: R/W 
Default Value: | 0000000000000000h Size: 64 bits 


This register can be accessed as 8 separate 8-bit registers or 2 separate 32-bit register. 


Description 


DATABUFFER[63:0] — R/W. This field is the 8 bytes of the data buffer. Bits 7:0 
correspond to least significant byte (byte 0). Bits 63:56 correspond to the most 
significant byte (byte 7). 

The bytes in the Data Buffer must be written with data before software initiates a write 
request. For a read request, the Data Buffer contains valid data when DONE_STS bit 
(offset AO, bit 16) is cleared by the hardware, ERROR_GOOD#_STS (offset AO, bit 6) is 
cleared by the hardware, and the DATA_LENGTH_CNT field (offset AO, bits 3:0) 
indicates the number of bytes that are valid. 





CONFI G—Configuration Register 


Offset: MEM_BASE + BO-B3h Attribute: R/W 
Default Value: 00007FO1h Size: 32 bits 


a 


USB_ADDRESS_ CNF — R/W. This 7-bit field identifies the USB device address used 
by the controller for all Token PID generation. (Default = 7Fh) 


USB_ENDPOINT_CNF — R/W. This 4-bit field identifies the endpoint used by the 
controller for all Token PID generation. (Default = 1h) 
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18 


Note: 


Note: 


18.1 


Note: 


Table 18-1. 





Intel® High Definition Audio 
Controller Registers (D27:FO) 


The Intel High Definition Audio controller resides in PCl Device 27, Function 0 on bus 0. 
This function contains a set of DMA engines that are used to move samples of digitally 
encoded data between system memory and external codecs. 


All registers in this function (including memory-mapped registers) must be addressable 
in byte, word, and D-word quantities. The software must always make register 
accesses on natural boundaries (i.e. D-word accesses must be on D-word boundaries; 
word accesses on word boundaries, etc.) In addition, the memory-mapped register 
space must not be accessed with the LOCK semantic exclusive-access mechanism. If 
software attempts exclusive-access mechanisms to the Intel High Definition Audio 
memory-mapped space, the results are undefined. 


Users interested in providing feedback on the Intel High Definition Audio specification 
or planning to implement the Intel High Definition Audio specification into a future 
product will need to execute the Intel™ High Definition Audio Specification Developer’s 
Agreement. For more information, contact nextgenaudio@intel.com. 


Intel® High Definition Audio PCI Configuration 
Space (Intel® High Definition Audio— D27:FO) 


Address locations that are not shown should be treated as Reserved. 


Intel® High Definition Audio PCI Register Address Map 
(I ntel® High Definition Audio D27:FO) (Sheet 1 of 2) 


[aise [enenone] ——_Restertone [beta a 
0O0h-O1h | VID [| Vendoridentification = [Vendor Identification = Identification 8086h | RO | 


See register 
06h-07h | PcISTS [PCiStatus Status 0010h 


Revision Identification BECTEGIStET 
ae 


| PL | Programming Interface ramming Interface 


i 
[aah [acc [pase Css Cage mF 
[och [es [eache tine see oh 
SS SS 


Intel® High Definition Audio Lower Base 
10h-13h HDBARL Address (Memory) 00000004h R/W, RO 


Intel High Definition Audio Upper Base 
Address (Memory) 00000000h 


2Ch-2Dh SVID Subsystem Vendor Identification 0000h R/WO 


14h-17h HDBARU 
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Table 18-1. Intel® High Definition Audio PCI Register Address Map 
(I ntel® High Definition Audio D27:FO) (Sheet 2 of 2) 


a 
psc INT [imerupttine oh 
a ee ee 
[aon [ACT [Tel Fh Definition asia Control [mh RW.RO | 
[aan [Tes ate cass Seretoh_ 
[Son-sin [PID [PCI Power Wanagement Capabiiy 1D | _6001h | RIWO. RO] 
[s2ncsan [PC [Power Management Capabiies —[COZh 


54h- 57h pres | Power Management Control and Status 00000000h aa 


[son-eam [IO [WET CamebiTD 70H RO 
[sen-eah_| "vin [Si Nessoge Upper aaaress [000000008 [ww] 
[Sen-soR | WW [NST wesaGeDste 0000 | RT 
[on=7aR_ | PRB [Pe Eee Copa Tare | ~oowar | Fo 
[7an-7am_ | PxC [PCI Exwress Capabiiies «00m [RO | 
[Tan-7eh_| DEVS [Devcestaus SCHUH TRO 


100h-103h | VCCAP Aaa Ennanced Cepability 13010002h | R/Wo 


[OAR TOTR | PUCCAPI [Pork VE Capabiiy Reger | on00000mm [FO | 
[ioen=10en | PvCcAP2 [Fork VC Capabity Regiter2 | ov0000008 [RO | 
Paoch=100 | Pvcere[Porevecentrr 0000 RO| 
Proeh=r0rh | WVCSTS[Pomvestaus 00H RO 
[ron=iash | vcocar [Veo Resource Capabiiiy—————~f-ov0000008 [RO | 
[iah=ireh | VOosTs[veDResourcestews «00H RO 
PIGh=IFh | VGICAP _[VerResource Capabiiiy | on0000008 [FO | 
Prash=ia7h | VESTS [VerResourcestaus 000 | RO | 


130h-133h RCCAP Root Complex Link Declaration Enhanced 00010005h 
Capability Header 


134h-137h Element Self Description OF000100h | RO | 
140h-143h | L1IDESC_ |Link 1 Description 00000001h | RO | 


148h-14Bh | L1ADDL_ | Link 1 Lower Address Bee Registre! | RO 
Description 


14Ch-14Fh | LIADDU_ | Link 1 Upper Address 00000000h | RO | 
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18.1.1 


18.1.2 


18.1.3 


viD—Vendor Identification Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Offset: 00h-01h Attribute: RO 
Default Value: 8086h Size: 16 bits 


rr eee 





Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h 


DI D—Device Identification Register 
(Intel® High Definition Audio Controller—D27:FO) 


Offset Address: O2h-03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


Device ID — RO. This is a 16-bit value assigned to the Intel® 1CH9 Intel High 
Definition Audio controller. Refer to the Intel® 1/O Controller Hub (ICH9) Family 
Specification Update for the value of the Device ID Register. 





PCI CMD—PCI Command Register 
(Intel® High Definition Audio Controller—D27:FO) 


Offset Address: O4h-05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


as 


Interrupt Disable (1D) — R/W. 

O= The INTx# signals may be asserted. 

1= The Intel® High Definition Audio controller's INTx# signal will be de-asserted. 
Note: that this bit does not affect the generation of MSI's. 


| 9 | Fast Back to Back Enable (FBE) — RO. Not implemented. Hardwired to 0. 


0 


SERR# Enable (SERR_EN) — R/W. SERR# is not generated by the |CH9 Intel High 
Definition Audio Controller. 


7 Wait Cycle Control (WCC) — RO. Not implemented. Hardwired to 0. 


| 6 | Parity Error Response (PER) — R/W. Not implemented. 
VGA Palette Snoop (VPS). Not implemented. Hardwired to 0. 


Memory Write and I nvalidate Enable (MWIE) — RO. Not implemented. Hardwired to 0. 





Special Cycle Enable (SCE). Not implemented. Hardwired to 0. 
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Bus Master Enable (BME) — R/W. Controls standard PCI Express* bus mastering 
capabilities for Memory and I/O, reads and writes. Note that this bit also controls MSI 
generation since MSI's are essentially Memory writes. 

0 = Disable 

1 = Enable 


Memory Space Enable (MSE) — R/W. Enables memory space addresses to the Intel 
High Definition Audio controller. 

0 = Disable 

1 = Enable 


1/O Space Enable (1OSE)—RO. Hardwired to 0 since the Intel High Definition Audio 
controller does not implement I/O space. 





PCISTS—PCI Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Offset Address: O6h-07h Attribute: RO, R/WC 
Default Value: 0010h Size: 16 bits 


Detected Parity Error (DPE) — RO. Not implemented. Hardwired to 0. 
SERR# Status (SERRS) — RO. Not implemented. Hardwired to 0. 


Received Master Abort (RMA) — R/WC. Software clears this bit by writing a 1 to 
it. 
13 0 = No master abort received. 
1 = The Intel® High Definition Audio controller sets this bit when, as a bus master, it 
receives a master abort. When set, the Intel High Definition Audio controller 
clears the run bit for the channel that received the abort. 

Received Target Abort (RTA) — RO. Not implemented. Hardwired to 0. 
Signaled Target Abort (STA) — RO. Not implemented. Hardwired to 0. 
DEVSEL# Timing Status (DEV_STS) — RO. Does not apply. Hardwired to 0. 

Data Parity Error Detected (DPED) — RO. Not implemented. Hardwired to 0. 

Fast Back to Back Capable (FB2BC) — RO. Does not apply. Hardwired to 0. 


Reserved. 


66 MHz Capable (66MHZ_CAP) — RO. Does not apply. Hardwired to 0. 


configuration offset 34h. 


Interrupt Status (1S) — RO. 


0 = This bit is 0 after the interrupt is cleared. 
1 = This bit is 1 when the INTx# is asserted. 


Note that this bit is not set by an MSI. 


Reserved. 





Capabilities List (CAP_LIST) — RO. Hardwired to 1. Indicates that the controller 
4 contains a capabilities pointer list. The first item is pointed to by looking at 
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18.1.5 RI D—Revision I dentification Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Offset: 08h Attribute: RO 
Default Value: See bit description Size: 8 Bits 


ES rr ee 


Revision ID — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family Specification 
Update for the value of the Revision 1D Register 





18.1.6 PI —Programming Interface Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Offset: 09h Attribute: RO 
Default Value: 00h Size: 8 bits 


} Bit | Description 


Programming Interface — RO. 


18.1.7 SCC—Sub Class Code Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: OAh Attribute: RO 
Default Value: 03h Size: 8 bits 


Pe cine 


Sub Class Code (SCC) — RO. 


7: 
e 03h = Audio Device 





18.1.8 BCC—Base Class Code Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: OBh Attribute: RO 
Default Value: 04h Size: 8 bits 


el ee 


7:0 Base Class Code (BCC) — RO. 
04h = Multimedia device 





18.1.9 CLS—Cache Line Size Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: OCh Attribute: R/W 
Default Value: 00h Size: 8 bits 


a 





Cache Line Size — R/W. Implemented as R/W register, but has no functional impact to 
, the ICH9 
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LT—Latency Timer Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


Description 


7:0 | Latency Timer — RO. Hardwired to 00 


HEADTYP—Header Type Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: OEh Attribute: RO 
Default Value: 00h Size: 8 bits 


Description 


7:0 | Header Type — RO. Hardwired to 00. 


HDBARL—I ntel® High Definition Audio Lower Base 
Address Register 
(Intel® High Definition Audio—D27:FO) 


Address Offset: 10h-13h Attribute: R/W, RO 
Default Value: |00000004h Size: 32 bits 


Description 


Lower Base Address (LBA) — R/W. Base address for the Intel® High Definition Audio 
controller’s memory mapped configuration registers. 16 Kbytes are requested by 
hardwiring bits 13:4 to Os. 


Prefetchable (PREF) — RO. Hardwired to 0 to indicate that this BAR is NOT prefetchable 
Address Range (ADDRNG) — RO. Hardwired to 10b, indicating that this BAR can be 
2:1 : : 
located anywhere in 64-bit address space. 
So | Space Type (SPTYP) — RO. Hardwired to 0. Indicates this BAR is located in memory 
space. 


HDBARU—Intel® High Definition Audio Upper Base 
Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 14h-17h Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


a 





Upper Base Address (UBA) — R/W. Upper 32 bits of the Base address for the Intel® 
High Definition Audio controller’s memory mapped configuration registers. 
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18.1.14 SViD—Subsystem Vendor Identification Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 2Ch-2Dh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Function Level Reset: No 


The SVID register, in combination with the Subsystem ID register (D27:FO:2Eh), 
enable the operating environment to distinguish one audio subsystem from the 
other(s). 


This register is implemented as write-once register. Once a value is written to it, the 
value can be read back. Any subsequent writes will have no effect. 


This register is not affected by the D3yo7 to DO transition. 


FE a 


Subsystem Vendor ID — R/WO. 


18.1.15 SIiD—Subsystem Identification Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Function Level Reset: No 





The SID register, in combination with the Subsystem Vendor ID register (D27:FO:2Ch) 
make it possible for the operating environment to distinguish one audio subsystem 
from the other(s). 


This register is implemented as write-once register. Once a value is written to it, the 
value can be read back. Any subsequent writes will have no effect. 


This register is not affected by the D3yo7 to DO transition. 


Description 


18.1.16 CAPPTR—Capabilities Pointer Register (Audio—D27:FO) 


Address Offset: 34h Attribute: RO 
Default Value: 50h Size: 8 bits 





This register indicates the offset for the capability pointer. 


Ce scion 


Capabilities Pointer (CAP_ PTR) — RO. This field indicates that the first capability 
pointer offset is offset 50h (Power Management Capability) 
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INTLN—Interrupt Line Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 3Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 


a 


Interrupt Line (INT_LN) — R/W. This data is not used by the Intel® ICH9. It is used 
to communicate to software the interrupt line that the interrupt pin is connected to. 





INTPN—I nterrupt Pin Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 3Dh Attribute: RO 
Default Value: See Description Size: 8 bits 


a 


Interrupt Pin — RO. This reflects the value of D27IP.ZIP (Chipset Config 
Registers: Offset 3110h: bits 3:0). 





HDCTL—Intel® High Definition Audio Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 40h Attribute: RO 
Default Value: Olh Size: 8 bits 


a 


Intel® High Definition Signal Mode — RO. 
This bit is hardwired to 1 (High Definition Audio mode) 
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18.1.20 TCSEL—Traffic Class Select Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 44h Attribute: R/W 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


This register assigned the value to be placed in the TC field. CORB and RIRB data will 
always be assigned TCO. 


2 re 


Reserved. 


Intel® High Definition Audio Traffic Class Assignment (TCSEL) — R/W. 


This register assigns the value to be placed in the Traffic Class field for input data, 
output data, and buffer descriptor transactions. 


000 = TCO 
001 = TC1 


010 = TC2 


011 = TC3 
100 = TC4 
101 = TC5 
110 = TC6 
111 = TC7 


NOTE: These bits are not reset on D3yo7 to DO transition; however, they are reset by 
PLTRST#. 





18.1.21 DCKCTL— Docking Control Register (Mobile Only) 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 4Ch Attribute: R/W, RO 
Default Value: 00h Size: 8 bits 
Function Level Reset: No 


Dock Attach (DA) — R/W / RO: Software writes a 1 to this bit to initiate the docking 
sequence on the HDA_DOCK_EN# and HDA_DOCK_RST# signals. When the docking 
sequence is complete hardware will set the Dock Mated (GSTS.DM) status bit to 1. 


Software writes a 0 to this bit to initiate the undocking sequence on the 


HDA_DOCK_EN# and HDA_DOCK_RST# signals. When the undocking sequence is 
complete hardware will set the Dock Mated (GSTS.DM) status bit to 0. 


Note that software must check the state of the Dock Mated (GSTS.DM) bit prior to 
writing to the Dock Attach bit. Software shall only change the DA bit from 0 to 1 when 
DM=0. Likewise, software shall only change the DA bit from 1 to 0 when DM=1. If 
these rules are violated, the results are undefined. 


Note that this bit is Read Only when the DCKSTS.DS bit = 0. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 707 


| | ® 
| n tel ) Intel® High Definition Audio Controller Registers (D27:FO) 


18.1.22 DCKSTS— —Docking Status Register (Mobile Only) 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 4Dh Attribute: R/WO, RO 
Default Value: 80h Size: 8 bits 
Function Level Reset: No 


Docking Supported (DS) — R/WO: A 1 indicates that |CH9 supports HD Audio 
Docking. The DCKCTL.DA bit is only writable when this DS bit is 1. ACPI BIOS software 
should only branch to the docking routine when this DS bit is 1. BlIOS may clear this bit 
to 0 to prohibit the ACPI BIOS software from attempting to run the docking routines. 
Note that this bit is reset to its default value only on a PLTRST#, but not on a CRST# or 
D3hot-to-DO transition. 


Dock Mated (DM) — RO: This bit effectively communicates to software that an Intel® 
HD Audio docked codec is physically and electrically attached. 

Controller hardware sets this bit to 1 after the docking sequence triggered by writing a 
1 to the Dock Attach (GCTL.DA) bit is completed (HDA_DOCK_RST# deassertion). This 
bit indicates to software that the docked codec(s) may be discovered via the STATESTS 
register and then enumerated. 

Controller hardware sets this bit to 0 after the undocking sequence triggered by writing 
a 0 to the Dock Attach (GCTL.DA) bit is completed (HDA_DOCK_EN# deasserted). This 
bit indicates to software that the docked codec(s) may be physically undocked. 





18.1.23 Pl D—Fcl Power Management Capability |D Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 50h-51h Attribute: R/WO, RO 


Default Value: 6001h Size: 16 bits 
Function Level Reset: No (Bits 7:0 only) 


Next Capability (Next) — R/WO. Points to the next capability structure (MSI). 


Cap ID (CAP) — RO. Hardwired to O1h. Indicates that this pointer is a PC] power 
management capability. These bits are not reset by Function Level Reset. 
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18.1.24 PC—Power Management Capabilities Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 52h-53h Attribute: RO 
Default Value: C842h Size: 16 bits 


PME Support — RO. Hardwired to 11001b. Indicates PME# can be generated from D3 
and DO states. 


D2 Support — RO. Hardwired to 0. Indicates that D2 state is not supported. 
D1 Support —RO. Hardwired to 0. Indicates that D1 state is not supported. 
Aux Current — RO. Hardwired to 001b. Reports 55 mA maximum suspend well current 


required when in the D3¢o,p State. 


Device Specific Initialization (DSI) — RO. Hardwired to 0. Indicates that no device 
specific initialization is required. 


PME Clock (PMEC) — RO. Does not apply. Hardwired to 0. 


Version — RO. Hardwired to 010b. Indicates support for version 1.1 of the PCI Power 
Management Specification. 
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18.1.25 PCS—Power Management Control and Status Register 
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(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 54h-57h Attribute: RO, R/W, R/WC 
Default Value: 00000000h Size: 32 bits 
Function Level Reset: No 


a 
[25 [Bus Power/Gock Control Enable — RO. Does rot apy Harinredto@ 
[22 [B83 Support — RO, Does not apni HardwiredioO. 


3 
2 
PME Status (PMES) — R/WC. 
0 = Software clears the bit by writing a 1 to it. 
1 = This bit is set when the Intel® High Definition Audio controller would normally 
5 assert the PME# signal independent of the state of the PME_EN bit (bit 8 in this 
register). 
This bit is in the resume well and is cleared by a power-on reset. Software must not 
make assumptions about the reset state of this bit and must set it appropriately. 
19 
2 
0 


PME Enable (PMEE) — R/W. 

0 = Disable 

1 = When set and if corresponding PMES also set, the Intel High Definition Audio 
controller sets the PME_BO_STS bit in the GPEO_STS register (PMBASE +28h). 


This bit in the resume well and is cleared on a power-on reset. Software must not make 
assumptions about the reset state of this bit and must set it appropriately. 


Reserved 


Power State (PS) — R/W. This field is used both to determine the current power state 

of the Intel High Definition Audio controller and to set a new power state. 

00 = DO state 

11 = D3yor state 

Others = reserved 

NOTES: 

1. If software attempts to write a value of 01b or 10b in to this field, the write 
operation must complete normally; however, the data is discarded and no state 
change occurs. 


passed 


2 

2 
21: 
1 
14 
7: 
1: 


2. When in the D3yo7 states, the Intel High Definition Audio controller’s configuration 
space is available, but the 1|O and memory space are not. Additionally, interrupts are 
blocked. 

3. When software changes this value from D3,7 state to the DO state, an internal 
warm (soft) reset is generated, and software must re-initialize the function. 
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18.1.26 


18.1.27 


18.1.28 


18.1.29 


MI D—MSI Capability 1D Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 60h-61h Attribute: RO 
Default Value: 7005h Size: 16 bits 


| Bit | Description 


Next Capability (Next) — RO. Hardwired to 70h. Points to the PCI Express* capability 
; structure. 


Cap ID (CAP) — RO. Hardwired to O5h. Indicates that this pointer is a MSI capability 





MMC—MSI Message Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 62h-63h Attribute: RO, R/W 
Default Value: 0080h Size: 16 bits 


a 


j 64b Address Capability (64ADD) — RO. Hardwired to 1. Indicates the ability to 
generate a 64-bit message address 


Multiple Message Enable (MME) — RO. Normally this is a R/W register. However since 
only 1 message is supported, these bits are hardwired to 000 = 1 message. 


3:1 Multiple Message Capable (MMC) — RO. Hardwired to 0 indicating request for 1 
: message. 


MSI Enable (ME) — R/W. 

0 = an MSI may not be generated 

1 = an MSI will be generated instead of an INTx signal. 
MMLA—MSI Message Lower Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 64h-67h Attribute: RO, R/W 
Default Value: | 00000000h Size: 32 bits 


ee 
Message Lower Address (MLA) — R/W. Lower address used for MSI message. 


MMUA—MSI Message Upper Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 68h-6Bh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


} Bit | Description 











. Message Upper Address (MUA) — R/W. Upper 32-bits of address used for MSI 
one message 
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18.1.32 
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MMD—MSI Message Data Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 6Ch-6Dh Attribute: R/W 
Default Value: 0000h Size: 16 bits 


i 
Message Data (MD) — R/W. Data used for MSI message. 


PX!ID—PCI Express* Capability |D Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 70h-71h Attribute: RO 
Default Value: 0010h Size: 16 bits 


Description 


Next Capability (Next) — RO. Hardwired to 0. Indicates that this is the last capability 


structure in the list. 


7:0 Cap ID (CAP) — RO. Hardwired to 10h. Indicates that this pointer is a PCI Express* 
; capability structure 


PXC—PCI Express* Capabilities Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 72h-73h Attribute: RO 
Default Value: 0091h Size: 16 bits 


a 


Interrupt Message Number (IMN) — RO. Hardwired to 0. 
7:4 
3:0 





Slot Implemented (SI) — RO. Hardwired to 0. 


Ea Device/ Port Type (DPT) — RO. Hardwired to 1001b. Indicates that this is a Root 


Complex Integrated endpoint device. 





} 30 | Capability Version (CV) — RO. Hardwired to 0001b. Indicates version #1 PCI Express 
capability 
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18.1.33 DEVCAP—Device Capabilities Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 74h-77h Attribute: R/WO, RO 
Default Value: 10000000h Size: 32 bits 
Function Level Reset: No 


a 
31:29 | Reserved 


Function Level Reset (FLR) — R/WO. A 1 indicates that the |CH9 HD Audio Controller 
28 : a 
supports the Function Level Reset Capability. 


27:26 | Captured Slot Power Limit Scale (SPLS) — RO. Hardwired to 0. 
25:18 | Captured Slot Power Limit Value (SPLV) — RO. Hardwired to 0. 


Endpoint L1 Acceptable Latency — R/WO 
Endpoint LOs Acceptable Latency — R/WO. 
Extended Tag Field Support — RO. Hardwired to 0. Indicates 5-bit tag field support 


Phantom Functions Supported — RO. Hardwired to 0. Indicates that phantom functions 
not supported 


Max Payload Size Supported — RO. Hardwired to 0. Indicates 128-B maximum 
payload size capability 
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18.1.34 DEVC—Device Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 78h-79h Attribute: R/W, RO 
Default Value: 0800h Size: 16 bits 
Function Level Reset: No (Bit 11 Only) 


Initiate FLR (IF) — R/W. This bit is used to initiate FLR transition. 
1 = A write of 1 initiates FLR transition. Since hardware does not respond to any cycles 
until FLR completion, the read value by software from this bit is 0. 


Max Read Request Size — RO. Hardwired to 0 enabling 128B maximum read request 
size. 


No Snoop Enable (NSNPEN) — R/W. 

0 = The Intel® High Definition Audio controller will not set the No Snoop bit. In this 
case, isochronous transfers will not use VC1 (VCi) even if it is enabled since VC1 is 
never snooped. Isochronous transfers will use VCO. 

1 = The Intel High Definition Audio controller is permitted to set the No Snoop bit in the 
Requester Attributes of a bus master transaction. In this case, VCO or VC1 may be 
used for isochronous transfers. 


NOTE: This bit is not reset on D3yo7 to DO transition; however, it is reset by PLTRST#. 
This bit is not reset by Function Level Reset. 


Auxiliary Power Enable — RO. Hardwired to 0, indicating that Intel High Definition Audio 
device does not draw AUX power 
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18.1.35 DEVS—Device Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 7Ah-7Bh Attribute: RO 
Default Value: 0010h Size: 16 bits 


Reserved 


| 
a Transactions Pending — RO. 
5 0 = Indicates that completions for all non-posted requests have been received 
1 = Indicates that Intel® High Definition Audio controller has issued non-posted 


requests which have not been completed. 


AUX Power Detected — RO. Hardwired to 1 indicating the device is connected to 
resume power 


Unsupported Request Detected — RO. Not implemented. Hardwired to 0. 


Fatal Error Detected — RO. Not implemented. Hardwired to 0. 
Non-Fatal Error Detected — RO. Not implemented. Hardwired to 0. 
| 0 | Correctable Error Detected — RO. Not implemented. Hardwired to 0. 


18.1.36 VCCAP—Virtual Channel Enhanced Capability Header 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 100h-103h Attribute: R/WO 
Default Value: 13010002h Size: 32 bits 


Next Capability Offset — R/WO. Points to the next capability header. 

130h = Root Complex Link Declaration Enhanced Capability Header 

000h = Root Complex Link Declaration Enhanced Capability Header is not supported. 
Capability Version — R/WO. 


Oh = PCI Express Virtual channel capability and the Root Complex Topology Capability 
structure are not supported. 





1h = PCI Express Virtual channel capability and the Root Complex Topology Capability 
structure are supported. 


PCI Express* Extended Capability — R/WO. 

0000h =PCI Express Virtual channel capability and the Root Complex Topology 
Capability structure are not supported. 

0002h =PCI Express Virtual channel capability and the Root Complex Topology 
Capability structure are supported. 
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18.1.38 


18.1.39 
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PVCCAP1—Port VC Capability Register 1 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 104h-107h Attribute: RO 
Default Value: | 00000001h Size: 32 bits 


a 
11:10 | Port Arbitration Table Entry Size — RO. Hardwired to 0 since this is an endpoint device. 


Reference Clock — RO. Hardwired to 0 since this is an endpoint device. 


Low Priority Extended VC Count — RO. Hardwired to 0. Indicates that only VCO belongs 
to the low priority VC group 


Extended VC Count — RO. Hardwired to 001b. Indicates that 1 extended VC (in 
addition to VCO) is supported by the Intel® High Definition Audio controller. 





PVCCAP2 — Port VC Capability Register 2 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 108h-10Bh Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


a 


31:24 VC Arbitration Table Offset — RO. Hardwired to 0 indicating that a VC arbitration table 
, is not present. 


pro VC Arbitration Capability — RO. Hardwired to 0. These bits are not applicable since the 
7:0 


Intel® High Definition Audio controller reports a 0 in the Low Priority Extended VC 
Count bits in the PVCCAP1 register. 





PVCCTL — Port VC Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 10Ch-10Dh Attribute: RO 
Default Value: 0000h Size: 16 bits 


a 


15:4 | Reserved. 


VC Arbitration Select — RO. Hardwired to 0. Normally these bits are R/W. However, 
3:1 | these bits are not applicable since the Intel® High Definition Audio controller reports a 


0 in the Low Priority Extended VC Count bits in the PVCCAP1 register 


| Load VC Arbitration Table — RO. Hardwired to 0 since an arbitration table is not 
present. 
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18.1.40 PVCSTS— Port VC Status Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 10Eh-10Fh Attribute: RO 
Default Value: 0000h Size: 16 bits 


Reserved. 





VC Arbitration Table Status — RO. Hardwired to 0 since an arbitration table is not 
present. 


18.1.41 VCOCAP—VCO Resource Capability Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 110h-113h Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


Port Arbitration Table Offset — RO. Hardwired to 0 since this field is not valid for 
endpoint devices 


Reject Snoop Transactions — RO. Hardwired to 0 since this field is not valid for endpoint 
devices. 


Port Arbitration Capability — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 
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18.1.42 VCOCTL—VCO Resource Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 114h-117h Attribute: R/W, RO 


Default Value: 800000FFh Size: 32 bits 
Function Level Reset: No 


a 


19:17 Port Arbitration Select — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 


31 
16 Load Port Arbitration Table — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 
7:0 TC/ VCO Map — R/W, RO. Bit 0 is hardwired to 1 since TCO is always mapped VCO. Bits 
, [7:1] are implemented as R/W bits. 





18.1.43 VCOSTS—VCO Resource Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 11Ah-11Bh Attribute: RO 
Default Value: 0000h Size: 16 bits 


VCO Negotiation Pending — RO. Hardwired to 0 since this bit does not apply to the 


integrated Intel® High Definition Audio device 


Port Arbitration Table Status — RO. Hardwired to 0 since this field is not valid for 
endpoint devices 
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18.1.44 VCiCAP—VCi Resource Capability Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 11Ch-11Fh Attribute: RO 
Default Value: 00000000h Size: 32 bits 


rr ee 
31:24 Port Arbitration Table Offset — RO. Hardwired to 0 since this field is not valid for 


endpoint devices. 


Reserved. 


22:16 Maximum Time Slots — RO. Hardwired to 0 since this field is not valid for endpoint 


devices 


15 Reject Snoop Transactions — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 

14 Advanced Packet Switching — RO. Hardwired to 0 since this field is not valid for 
endpoint devices 


Reserved 


Port Arbitration Capability — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 





18.1.45 VCiCTL—VCi Resource Control Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 120h-123h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 
Function Level Reset: No 


VCi Enable — R/W. 
31 0 = VCi is disabled 
1 = VCi is enabled 
Note: This bit is not reset on D3yo7 to DO transition; however, it is reset by PLTRST#. 


26:24 vci 1D — R/W. This field assigns a VC ID to the VCi resource. This field is not used by 
, the ICH9 hardware, but it is R/W to avoid confusing software. 


19:17 Port Arbitration Select — RO. Hardwired to 0 since this field is not valid for endpoint 
: devices 


Load Port Arbitration Table — RO. Hardwired to 0 since this field is not valid for endpoint 
devices 


TC/ VCi Map — R/W, RO. This field indicates the TCs that are mapped to the VCi 
7.9 | resource. Bit 0 is hardwired to 0 indicating that it cannot be mapped to VCi. Bits [7:1] 
: are implemented as R/W bits. This field is not used by the ICH9 hardware, but it is R/W 
to avoid confusing software. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 719 


| | ® 
( | n tel ) Intel® High Definition Audio Controller Registers (D27:FO) 


18.1.46 


18.1.47 


18.1.48 


720 


VCiSTS—VCi Resource Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 126h-127h Attribute: RO 
Default Value: 0000h Size: 16 bits 


Pepe 


VCi Negotiation Pending — RO. Does not apply. Hardwired to 0. 


zz Port Arbitration Table Status — RO. Hardwired to 0 since this field is not valid for 


endpoint devices. 





RCCAP—Root Complex Link Declaration Enhanced 
Capability Header Register (Intel® High Definition Audio 
Controller—D27:FO) 


Address Offset: 130h Attribute: RO 
Default Value: | 00010005h Size: 32 bits 


a 


1:20 | Next Capability Offset — RO. Hardwired to 0 indicating this is the last capability. 


19:16 | Capability Version — RO. Hardwired to Lh. 


PCI Express* Extended Capability |D — RO. Hardwired to 0005h. 





ESD—Element Self Description Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 134h-137h Attribute: RO 
Default Value: OFO00100h Size: 32 bits 


Port Number — RO. Hardwired to OFh indicating that the Intel® High Definition Audio 
controller is assigned as Port #15d. 


Component ID — RO. This field returns the value of the ESD.CID field of the chip 
configuration section. ESD.CID is programmed by BIOS. 


Number of Link Entries — RO. The Intel High Definition Audio only connects to one 
device, the ICH9 egress port. Therefore this field reports a value of 1h. 


3:0 Element Type (ELTYP) — RO. The Intel High Definition Audio controller is an 
, integrated Root Complex Device. Therefore, the field reports a value of Oh. 
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18.1.49 


18.1.50 


18.1.51 


L1DESC—Link 1 Description Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Address Offset: 140h-143h Attribute: RO 
Default Value: | 00000001h Size: 32 bits 


pe ee | 
31:24 Target Port Number — RO. The Intel High Definition Audio controller targets the 


Intel® 1CH9’s Port 0. 
23:16 Target Component ID — RO. This field returns the value of the ESD.CID field of the 


chip configuration section. ESD.CID is programmed by BIOS. 


Reserved. 
Link Type — RO. Hardwired to 0 indicating Type 0. 
| 0 | Link Valid — RO. Hardwired to 1. 


LLADDL—Link 1 Lower Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 148h-14Bh Attribute: RO 
Default Value: See Register Description Size: 32 bits 


a ee 


Link 1 Lower Address — RO. Hardwired to match the RCBA register value in the PCI- 
LPC bridge (D31:FO:FOh). 


LLADDU—Link 1 Upper Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Address Offset: 14Ch-14Fh Attribute: RO 
Default Value: 00000000h Size: 32 bits 








Description 





Link 1 Upper Address — RO. Hardwired to 00000000h. 
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18.2 Intel® High Definition Audio Memory Mapped 
Configuration Registers 
(Intel® High Definition Audio— D27:FO) 


The base memory location for these memory mapped configuration registers is 
specified in the HDBAR register (D27:FO:offset 10h and D27:FO: offset 14h). The 
individual registers are then accessible at HDBAR + Offset as indicated in the following 
table. 


These memory mapped registers must be accessed in byte, word, or dword quantities. 


Table 18-2. Intel® High Definition Audio PCI Register Address Map 
(I ntel® High Definition Audio D27:FO) (Sheet 1 of 4) 


HDBAR + : 
ii | remone | oo oe } petoure | access 


14h-17h Extended Capabilities (Mobile Only) 
RW, FO 
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Table 18-2. Intel® High Definition Audio PCI Register Address Map 
(Intel® High Definition Audio D27:FO) (Sheet 2 of 4) 


HDBAR + 
Mnemonic Register Name mete 


[sch [nimsere [rime convor dm 
[son [winests [wine staus «dom * 
[sen | rresize famesee | ah 


68h-69h Immediate Command Status 0000h BW, BY 


70h-73h DPLBASE DMA Position Lower Base Address 00000000h R/W, RO 
74h-77h DPUBASE DMA Position Upper Base Address 00000000h 


80-82h ISDOCTL isnt as Resenipror a tebe) o40000h_ | R/W, RO 


ew ISDOSTS | 1SDO Status | 00h R/WC, RO 
ISDOLPIB | 1SDO Link Position in Buffer 
ISDOCBL__| ISDO Cyclic Buffer Length 
ISDOLVI ISDO Last Valid Index 
ISDOFIFOW | 1SDO FIFO Watermark 
ISDOFIFOS | 1SDO FIFO Size 
ISDOFMT | 1SDO Format 


98h-9Bh ISDOBDPL ISDO Buffer Descriptor List Pointer- 00000000h R/W, RO 
Lower Base Address 

9Ch-9Fh ISDOBDPU ISDO Buffer Description List Pointer- 00000000h 
Upper Base Address 

AOh-A2h ISDICTL ier Descriptor (Spo?) 040000h_ | R/W, RO 


Se ISDISTS |1ISD1 Status | 00h R/WC, RO 
ISDILPIB | 1SD1 Link Position in Buffer 
ISDICBL_ |1ISD1 Cyclic Buffer Length 
ISD1LVI ISD1 Last Valid Index 
ISD1FIFOW |1SD1 FIFO Watermark 
ISDIFIFOS |1SD1 FIFO Size 
ISDIFMT | 1SD1 Format 


B8h-BBh ISDIBDPL ISD1 Buffer Descriptor List Pointer- 00000000h R/W, RO 
Lower Base Address 

BCh-BEh ISDIBDPU ISD1 Buffer Description List Pointer- 00000000h 
Upper Base Address 

COh-C2h ISD2CTL peer aa Deseriptar2 (302) 040000h_ | R/W, RO 


| c3h_— ISD2STS | 1SD2 Status | 00h R/WC, RO 


om 
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Table 18-2. Intel® High Definition Audio PCI Register Address Map 
(Intel® High Definition Audio D27:FO) (Sheet 3 of 4) 


HDBAR + : 
| Morec™ | Memon | pices — } petoute | access 


[eah=cmm | 1S0aUr8 [1502 Link Posionin Baer | 00000007 | RO _| 


|SD2 Buffer Descriptor List Pointer- 
D8h-DBh ISD2BDPL bower Base Addracs 00000000h | R/W, RO 
DCh-DFh ISD2BDPU |ISD2 Buffer Description List Pointer- 00000000h R/W 
Upper Base Address 
E0h-E2h | ispactL | (Put Stream Descriptor 3 {ISD3) 040000h | R/W, RO 


|1SD3 Buffer Descriptor List Pointer- 
F8h-FBh ISD3BDPL Lower Base Address 00000000h R/W, RO 
ECh-FFh ISD3BDPU ISD3 Buffer Description List Pointer- 00000000h R/W 
Upper Base Address 
100h-102h | OSDOCTL prc SIT Sal PESE PhOnOSUSE0) 040000h_ | R/W, RO 


[ioah-107m [ ospaLria_[Os00 nk Postionnaufer | oooo0000n [FO 


OSDO Buffer Descriptor List Pointer- 
118h-11Bh OSDOBDPL Lower Base Address 00000000h | R/W, RO 
11Ch-11Fh OSDOBDPU OSDO Buffer Description List Pointer- 00000000h R/W 
Upper Base Address 
i0h-a2ah|'-<Gspien, | 20 ee ae 040000h_ | R/W, RO 


123h OSD1STS | OSD1 Status R/WC, RO 
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Table 18-2. Intel® High Definition Audio PCI Register Address Map 
(I ntel® High Definition Audio D27:FO) (Sheet 4 of 4) 


HDBAR + : ; 
Mnemonic Register Name | betaute | 


[azeh-T2ah | ~Osbicel [os0% Cycle Buertength | oo000000h | ww 
[iach-130h [Osouivi [050% Last atidindex —————*| oon Rw 
[izeiciam | Oscirirow [osot Fro watermark | 00am [ww 
OSDIFIFOS | OSD1 FIFO Size | o0BFh =| R/W 
OSD1FMT | OSD1 Format | oooh =| RW | 


R 
R 
R 
R 
R 
OSD1 Buffer Descriptor List Pointer- 
138h-13Bh OSD1BDPL cower base Address 00000000h | R/W, RO 
13Ch-13Fh OSD1BDPU OSD1 Buffer Description List Pointer- 00000000h R 
Upper Base Address 
iaGhaidsh| soswoerL. | OMeUl Si cam Pescrintor2 (OSB?) 040000h_ | R/W, RO 
Control 
R 
R 
R 
R 
R 
R 


143h OSD2STS___| OSD2 Status R/WC, RO 


144h-147h OSD2LPIB OSD2 Link Position in Buffer 00000000h 


150h-151h | OSD2FIFOS | OSD2 FIFO Size OOBFh 
OSD2 Buffer Descriptor List Pointer- 
158h-15Bh OSD2BDPL bowerlbace Addrace 00000000h | R/W, RO 
15Ch-15Fh OSD2BDPU OSD2 Buffer Description List Pointer- 00000000h R 
Upper Base Address 
160h-162h | OSD3CTL pu er ga Desciprona (Gas) 040000h_ | R/W, RO 


[iéeh-i6m | OSD31PIB [0808 Link Postion mn Bur | 000000 | RO | 
a 


148h-14Bh | OSD2CBL_ | OSD2 Cyclic Buffer Length 00000000h | RW | 
14Ch-14Dh | OSD2LvI ‘| OSD2 Last Valid Index 0000h | RW 
14Eh-14Fh | OSD2FIFOW | OSD2 FIFO Watermark 0004h | RW | 
152h-153h | OSD2FMT_ | OSD2 Format 0000h | RW | 


16Eh-16Fh | OSD3FIFOW | OSD3 FIFO Watermark 0004h 
170h-171h | OSD3FIFOS | OSD3 FIFO Size OOBFh 
172h-173h OSD3FMT OSD3 Format 0000h 


OSD3 Buffer Descriptor List Pointer- 
178h-17Bh OSD3BDPL Lower Base Addrass 00000000h | R/W, RO 
17Ch-17Fh OSD3BDPU OSD3 Buffer Description List Pointer- 00000000h R/ 
Upper Base Address 


/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 
/W 

W 
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18.2.1 


18.2.2 


18.2.3 


726 


GCAP— Global Capabilities Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 00h Attribute: RO 
Default Value: 4401h Size: 16 bits 


Number of Output Stream Supported — RO. Hardwired to 0100b indicating that the 
ICH9 Intel® High Definition Audio controller supports 4 output streams. 


Number of Input Stream Supported — RO. Hardwired to 0100b indicating that the 
ICH9 Intel High Definition Audio controller supports 4 input streams. 


Number of Bidirectional Stream Supported — RO. Hardwired to 0 indicating that 
the ICH9 Intel High Definition Audio controller supports 0 bidirectional stream. 


Reserved. 


Number of Serial Data Out Signals — RO. Hardwired to 0 indicating that the |CH9 
Intel High Definition Audio controller supports 1 serial data output signal. 


64-bit Address Supported — RO. Hardwired to 1b indicating that the |CH9 Intel High 
Definition Audio controller supports 64-bit addressing for BDL addresses, data buffer 
addressees, and command buffer addresses. 





VMI N—Minor Version Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 02h Attribute: RO 
Default Value: 00h Size: 8 bits 


ae —___ eet 


Minor Version — RO. Hardwired to 0 indicating that the Intel® 1CH9 supports minor 
revision number OOh of the Intel® High Definition Audio specification. 





VMA] — = Major Version Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 03h Attribute: RO 
Default Value: Oth Size: 8 bits 


a 


revision number 1 of the Intel® High Definition Audio specification. 





} 70 | Major Version — RO. Hardwired to O1h indicating that the Intel® 1CH9 supports major 
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18.2.4 OUTPAY— Output Payload Capability Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 04h Attribute: RO 
Default Value: 003Ch Size: 16 bits 


15:7 | Reserved. 


Output Payload Capability — RO. Hardwired to 3Ch indicating 60 word payload. 
This field indicates the total output payload available on the link. This does not include 
bandwidth used for command and control. This measurement is in 16-bit word 
quantities per 48 MHz frame. The default link clock of 24.000 MHz (the data is double 


pumped) provides 1000 bits per frame, or 62.5 words in total. 40 bits are used for 
command and control, leaving 60 words available for data payload. 


00h = O word 
= 1 word payload. 





= 256 word payload. 


18.2.5 INPAY—I nput Payload Capability Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 06h Attribute: RO 
Default Value: 001Dh Size: 16 bits 


Input Payload Capability — RO. Hardwired to 1Dh indicating 29 word payload. 
This field indicates the total output payload available on the link. This does not include 
bandwidth used for response. This measurement is in 16-bit word quantities per 48 


MHz frame. The default link clock of 24.000 MHz provides 500 bits per frame, or 31.25 


words in total. 36 bits are used for response, leaving 29 words available for data 
payload. 
00h = O word 

= 1 word payload. 


= 256 word payload. 
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18.2.6 GCTL—Global Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + O8h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Accept Unsolicited Response Enable — R/W. 


0 = Unsolicited responses from the codecs are not accepted. 
1 = Unsolicited response from the codecs are accepted by the controller and placed into 
the Response Input Ring Buffer. 


Reserved. 


Flush Control — R/W. Writing a 1 to this bit initiates a flush. When the flush 
completion is received by the controller, hardware sets the Flush Status bit and clears 
this Flush Control bit. Before a flush cycle is initiated, the DMA Position Buffer must be 
programmed with a valid memory address by software, but the DMA Position Buffer bit 
0 needs not be set to enable the position reporting mechanism. Also, all streams must 
be stopped (the associated RUN bit must be 0). 


When the flush is initiated, the controller will flush the pipelines to memory to ensure 
that the hardware is ready to transition to a D3 state. Setting this bit is not a critical 
step in the power state transition if the content of the FIFOs is not critical. 


Controller Reset # — R/W. 

0 = Writing a O causes the Intel High Definition Audio controller to be reset. All state 
machines, FIFOs and non-resume well memory mapped configuration registers 
(not PCI configuration registers) in the controller will be reset. The Intel High 
Definition Audio link RESET# signal will be asserted, and all other link signals will 


be driven to their default values. After the hardware has completed sequencing into 
the reset state, it will report a O in this bit. Software must read a 0 from this bit to 
verify the controller is in reset. 

1 = Writing a 1 causes the controller to exit its reset state and deassert the Intel High 
Definition Audio link RESET# signal. Software is responsible for setting/clearing 
this bit such that the minimum Intel High Definition Audio link RESET# signal 
assertion pulse width specification is met. When the controller hardware is ready to 
begin operation, it will report a 1 in this bit. Software must read a 1 from this bit 
before accessing any controller registers. This bit defaults to a 0 after Hardware 
reset, therefore, software needs to write a 1 to this bit to begin operation. 

NOTES: 

The CORB/RIRB RUN bits and all stream RUN bits must be verified cleared to 0 
before writing a 0 to this bit in order to assure a clean re-start. 

When setting or clearing this bit, software must ensure that minimum link timing 
requirements (minimum RESET# assertion time, etc.) are met. 

When this bit is 0 indicating that the controller is in reset, writes to all Intel High 
Definition Audio memory mapped registers are ignored as if the device is not 
present. The only exception is this register itself. The Global Control register is 
write-able as a DWord, Word, or Byte even when CRST# (this bit) is 0 if the byte 
enable for the byte containing the CRST# bit (Byte Enable 0) is active. If Byte 
Enable 0 is not active, writes to the Global Control register will be ignored when 
CRST# is 0. When CRST# is 0, reads to Intel High Definition Audio memory 
mapped registers will return their default value except for registers that are not 
reset with PLTRST# or on a D3yo7 to DO transition. 
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18.2.7 WAKEEN—Wake Enable Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + OCh Attribute: R/W 
Default Value: 0000h Size: 16 bits 
Function Level Reset: No 


15:4 | Reserved. 


Software must not make assumptions about the reset state of these bits and 
must set them appropriately. 





SDIN Wake Enable Flags — R/W. These bits control which SDI signal(s) may 
generate a wake event. A 1b in the bit mask indicates that the associated SDIN signal is 
enabled to generate a wake. 
Bit 0 is used for SDI[0O] 
Bit 1 is used for SDI[1] 
3:0 | Bit 2 is used for SDI[2] 
Bit 3 is used for SDI[3] 
NOTE: These bits are in the resume well and only cleared on a power on reset. 


18.2.8 STATESTS—State Change Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + OEh Attribute: R/WC 


Default Value: 0000h Size: 16 bits 
Function Level Reset: No 


ee 


Software must not make assumptions about the reset state of these bits and 
must set them appropriately. 





SDIN State Change Status Flags — R/WC. Flag bits that indicate which SDI signal(s) 
received a state change event. The bits are cleared by writing 1s to them. 
Bit O = SDI[0] 
Bit 1 = SDI[1] 
3:9 | Bit 2 = SDI[2] 
Bit 3 = SDI[3] 
NOTE: These bits are in the resume well and only cleared on a power on reset. 
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18.2.9 GSTS— Global Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 10h Attribute: R/WC 
Default Value: 0000h Size: 16 bits 


i rr ae 


eee Reserved 
Only) 


Dock Mated Interrupt Status (DMIS) — RW/C. A 1 indicates that the dock mating 
or unmating process has completed. For the docking process it indicates that dock is 
electrically connected and that software may detect and enumerate the docked 
codecs. For the undocking process it indicates that the dock is electrically isolated and 
that software may report to the user that physical undocking may commence. This bit 
gets set to a 1 by hardware when the DM bit transitions from a 0 to a 1 (docking) or 
from a 1 to a O (undocking). Note that this bit is set regardless of the state of the 
DMIE bit. 


Software clears this bit by writing a 1 to it. Writing a 0 to this bit has no affect. 


Reserved 


Dock Mated (DM): This bit effectively communicates to software that an Intel® HD 
Audio docked codec is physically and electrically attached. 

Controller hardware sets this bit to 1 after the docking sequence triggered by writing 
a 1 to the Dock Attach (GCTL.DA) bit is completed (HDA_DOCK_RST# deassertion). 
This bit indicates to software that the docked codec(s) may be discovered via the 
STATESTS register and then enumerated. 

Controller hardware sets this bit to 0 after the undocking sequence triggered by 
writing a 0 to the Dock Attach (GCTL.DA) bit is completed (DOCK_EN# deasserted). 
This bit indicates to software that the docked codec(s) may be physically undocked. 


This bit is Read Only. Writes to this bit have no effect. 


Flush Status — R/WC. This bit is set to 1 by hardware to indicate that the flush cycle 
initiated when the Flush Control bit (HDBAR + 08h, bit 1) was set has completed. 
Software must write a 1 to clear this bit before the next time the Flush Control bit is 
set to clear the bit. 
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18.2.10 ECAP—Extended Capabilities (Mobile Only) 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 14h Attribute: R/WO 
Default Value: 00000001h Size: 32 bits 


2 ee 
Reserved 


Docking Supported (DS)— R/WO. A 1 indicates that Intel® 1CH9 supports Intel® HD 
Audio Docking. The GCTL.DA bit is only writable when this DS bit is 1. Intel HD Audio 
driver software should only branch to its docking routine when this DS bit is 1. BIOS 


may clear this bit to 0 to prohibit the Intel HD Audio driver software from attempting to 
run the docking routines. 


Note that this bit is reset to its default value only on a PLTRST#, but not on a CRST# or 
D3hot-to-DO transition. 





18.2.11 OUTSTRMPAY—Output Stream Payload Capability 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 18h Attribute: RO 
Default Value: 0030h Size: 16 bits 


a 


Output FIFO Padding Type (OPADTYPE) — RO: Indicates how the controller pads 
the samples in the controller's buffer (FIFO). Controllers may not pad at all or may pad 
to byte or memory container sizes. 

Oh: Controller pads all samples to bytes 

1h: Reserved 

2h: Controller pads to memory container size 

3h: Controller does not pad and uses samples directly 


Output Stream Payload Capability (OUTSTRMPAY)— RO: Indicates maximum 
number of words per frame for any single output stream. This measurement is in 16 bit 
word quantities per 48 kHz frame. 48 Words (96B) is the maximum supported, 
therefore a value of 30h is reported in this register. The value does not specify the 
number of words actually transmitted in the frame, but is the size of the data in the 
controller buffer (FIFO) after the samples are padded as specified by OPADTYPE. Thus 
to compute the supported streams, each sample is padded according to OPADTYPE and 
then multiplied by the number of channels and samples per frame. If this computed 
value is larger than OUTSTRMPAY then that stream is not supported. The value 
specified is not affected by striping. 

Software must ensure that a format which would cause more Words per frame than 
indicated is not programmed into the Output Stream Descriptor Register. 


The value may be larger than the OUTPAY register value in some cases. 
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INSTRMPAY—I nput Stream Payload Capability 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 1Ah Attribute: RO 
Default Value: 0018h Size: 16 bits 


a 


Input FIFO Padding Type (I PADTYPE) — RO. Indicates how the controller pads the 
samples in the controller's buffer (FIFO). Controllers may not pad at all or may pad to 
byte or memory container sizes. 

Oh = Controller pads all samples to bytes 

1h = Reserved 

2h = Controller pads to memory container size 

3h = Controller does not pad and uses samples directly 


Input Stream Payload Capability (INSTRMPAY)— RO. Indicates the maximum 
number of Words per frame for any single input stream. This measurement is in 16-bit 
Word quantities per 48-kHz frame. 24 Words (48B) is the maximum supported, 


therefore a value of 18h is reported in this register. 

The value does not specify the number of words actually transmitted in the frame, but 
is the size of the data as it will be placed into the controller's buffer (FIFO). Thus 
samples will be padded according to IPADTYPE before being stored into controller 
buffer. To compute the supported streams, each sample is padded according to 
IPADTYPE and then multiplied by the number of channels and samples per frame. If this 
computed value is larger than INSTRMPAY then that stream is not supported. As the 
inbound stream tag is not stored with the samples it is not included in the word count. 
The value may be larger than INPAY register value in some cases, although values less 
than INPAY may also be invalid due to overhead. Software must ensure that a format 
which would cause more Words per frame than indicated is not programmed into the 
Input Stream Descriptor Register. 
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18.2.13 





INTCTL—I nterrupt Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 20h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Global Interrupt Enable (GIE) — R/W. Global bit to enable device interrupt 

generation. 

1 = When set to 1, the Intel® High Definition Audio function is enabled to generate an 
interrupt. This control is in addition to any bits in the bus specific address space, 
such as the Interrupt Enable bit in the PCI configuration space. 


NOTE: This bit is not affected by the D3,07 to DO transition. 


Controller Interrupt Enable (CIE) — R/W. Enables the general interrupt for 

controller functions. 

1 = When set to 1, the controller generates an interrupt when the corresponding status 
bit gets set due to a Response Interrupt, a Response Buffer Overrun, and State 
Change events. 


Stream Interrupt Enable (SIE) — R/W. When set to 1, the individual streams are 
enabled to generate an interrupt when the corresponding status bits get set. 


A stream interrupt will be caused as a result of a buffer with 1OC = lin the BDL entry 
being completed, or as a result of a FIFO error (underrun or overrun) occurring. Control 
over the generation of each of these sources is in the associated Stream Descriptor. 


The streams are numbered and the SIE bits assigned sequentially, based on their order 
in the register set. 


Bit 0 = input stream 1 
= input stream 2 
= input stream 3 
input stream 4 
output stream 1 
= output stream 2 
= output stream 3 
output stream 4 
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18.2.14 INTSTS—Interrupt Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 24h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


a 


Global I nterrupt Status (GIS) — RO. This bit is an OR of all the interrupt status bits 
in this register. 
NOTE: This bit is not affected by the D347 to DO transition. 


Controller Interrupt Status (CIS) — RO. Status of general controller interrupt. 

1 = Interrupt condition occurred due to a Response Interrupt, a Response Buffer 
Overrun Interrupt, or a SDIN State Change event. The exact cause can be 
determined by interrogating other registers. This bit is an OR of all of the stated 
interrupt status bits for this register. 


This bit is set regardless of the state of the corresponding interrupt enable bit, 
but a hardware interrupt will not be generated unless the corresponding enable 
bit is set. 

This bit is not affected by the D307 to DO transition. 


Stream Interrupt Status (SIS) — RO. 
1 = Interrupt condition occurred on the corresponding stream. This bit is an OR of all of 
the stream’s interrupt status bits. 


NOTE: These bits are set regardless of the state of the corresponding interrupt enable 
bits. 


The streams are numbered and the SIE bits assigned sequentially, based on their order 
in the register set. 


Bit O = input stream 1 
input stream 2 
input stream 3 
= input stream 4 
output stream 1 
= output stream 2 
= output stream 3 
output stream 4 





18.2.15 WALCLK—Wall Clock Counter Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 30h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


a 


Wall Clock Counter — RO. 32 bit counter that is incremented on each link Bit Clock 
period and rolls over from FFFF FFFFh to 0000 OOOOh. This counter will roll over to 0 


with a period of approximately 179 seconds. 


This counter is enabled while the Bit Clock bit is set to 1. Software uses this counter to 
synchronize between multiple controllers. Will be reset on controller reset. 
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18.2.16 SSYNC—Stream Synchronization Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 34h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


| ae 
Reserved 


Stream Synchronization (SSYNC) — R/W. When set to 1, these bits block data from 
being sent on or received from the link. Each bit controls the associated stream 
descriptor (i.e. bit O corresponds to the first stream descriptor, etc.) 

To synchronously start a set of DMA engines, these bits are first set to 1. The RUN bits 
for the associated stream descriptors are then set to 1 to start the DMA engines. When 
all streams are ready (FIFORDY =1), the associated SSYNC bits can all be set to 0 at 
the same time, and transmission or reception of bits to or from the link will begin 
together at the start of the next full link frame. 


To synchronously stop the streams, fist these bits are set, and then the individual RUN 


bits in the stream descriptor are cleared by software. 


If synchronization is not desired, these bits may be left as 0, and the stream will simply 
begin running normally when the stream’s RUN bit is set. 


The streams are numbered and the SIE bits assigned sequentially, based on their order 
in the register set. 


Bit O = input stream 1 
Bit 1 = input stream 2 
Bit 2 = input stream 3 
Bit 3 = input stream 4 
Bit 4 = output stream 1 





18.2.17 CORBLBASE—CORB Lower Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 40h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


CORB Lower Base Address — R/W. Lower address of the Command Output Ring 
Buffer, allowing the CORB base address to be assigned on any 128-B boundary. This 
register field must not be written when the DMA engine is running or the DMA transfer 
may be corrupted. 


CORB Lower Base Unimplemented Bits — RO. Hardwired to 0. This required the 
CORB to be allocated with 128B granularity to allow for cache line fetch optimizations. 
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18.2.18 CORBUBASE—CORB Upper Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 44h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


CORB Upper Base Address — R/W. Upper 32 bits of the address of the Command 


Output Ring buffer. This register field must not be written when the DMA engine is 
running or the DMA transfer may be corrupted. 





18.2.19 CORBWP—CORB Write Pointer Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 48h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


a 


CORB Write Pointer — R/W. Software writes the last valid CORB entry offset into this 
field in dword granularity. The DMA engine fetches commands from the CORB until the 
Read pointer matches the Write pointer. Supports 256 CORB entries (256x4B = 1KB). 
This register field may be written when the DMA engine is running. 





18.2.20 CORBRP—CORB Read Pointer Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 4Ah Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


a 


CORB Read Pointer Reset — R/W. Software writes a 1 to this bit to reset the CORB 
Read Pointer to 0 and clear any residual prefetched commands in the CORB hardware 
buffer within the Intel® High Definition Audio controller. The hardware will physically 
update this bit to 1 when the CORB Pointer reset is complete. Software must read a 1 
to verify that the reset completed correctly. Software must clear this bit back to 0 and 
read back the 0 to verify that the clear completed correctly. The CORB DMA engine 
must be stopped prior to resetting the Read Pointer or else DMA transfer may be 


corrupted. 


CORB Read Pointer (CORBRP)— RO. Software reads this field to determine how 
many commands it can write to the CORB without over-running. The value read 
indicates the CORB Read Pointer offset in Dword granularity. The offset entry read from 
this field has been successfully fetched by the DMA controller and may be over-written 
by software. Supports 256 CORB entries (256 x 4B=1KB). This field may be read while 
the DMA engine is running. 
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18.2.21 CORBCTL—CORB Control Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 4Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 


CS rr ae 
Reserved. 


Enable CORB DMA Engine — R/W. 
0 = DMA stop 


1 = DMA run 


After software writes a 0 to this bit, the hardware may not stop immediately. The 
hardware will physically update the bit to 0 when the DMA engine is truly stopped. 
Software must read a 0 from this bit to verify that the DMA engine is truly stopped. 


CORB Memory Error Interrupt Enable — R/W. 


If this bit is set the controller will generate an interrupt if the CMEI status bit (HDBAR + 
4Dh: bit 0) is set. 





18.2.22 CORBST—CORB Status Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 4Dh Attribute: R/WC 
Default Value: 00h Size: 8 bits 


ES 


CORB Memory Error Indication (CMEI) — R/WC. 

1 = Controller detected an error in the path way between the controller and memory. 
This may be an ECC bit error or any other type of detectable data error which 
renders the command data fetched invalid. 

Software can clear this bit by writing a 1 to it. However, this type of error leaves the 

audio subsystem in an un-viable state and typically required a controller reset by 

writing a 0 to the Controller Reset # bit (HDBAR + O8h: bit 0). 





18.2.23 CORBSI ZE—CORB Size Register 
Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 4Eh Attribute: RO 
Default Value: 42h Size: 8 bits 


ee 


CORB Size Capability — RO. Hardwired to 0100b indicating that the ICH9 only 
supports a CORB size of 256 CORB entries (1024B) 


CORB Size — RO. Hardwired to 10b which sets the CORB size to 256 entries (1024B) 
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18.2.24 RIRBLBASE—RIRB Lower Base Address Register 


18.2.25 


18.2.26 


738 


(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 50h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


a 


CORB Lower Base Address — R/W. Lower address of the Response Input Ring Buffer, 
allowing the RIRB base address to be assigned on any 128-B boundary. This register 


field must not be written when the DMA engine is running or the DMA transfer may be 
corrupted. 


RIRB Lower Base Unimplemented Bits — RO. Hardwired to 0. This required the RIRB to 
be allocated with 128-B granularity to allow for cache line fetch optimizations. 





RI RBUBASE—RIRB Upper Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 54h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Pence 


RIRB Upper Base Address — R/W. Upper 32 bits of the address of the Response 
Input Ring Buffer. This register field must not be written when the DMA engine is 
running or the DMA transfer may be corrupted. 





RIRBWP—RIRB Write Pointer Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 58h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


RIRB Write Pointer Reset — R/W. Software writes a 1 to this bit to reset the RIRB 
Write Pointer to 0. The RIRB DMA engine must be stopped prior to resetting the Write 
Pointer or else DMA transfer may be corrupted. 


This bit is always read as 0. 


RIRB Write Pointer (RIRBWP) — RO. Indicates the last valid RIRB entry written by 
the DMA controller. Software reads this field to determine how many responses it can 
read from the RIRB. The value read indicates the RIRB Write Pointer offset in 2 dword 
RIRB entry units (since each RIRB entry is 2 dwords long). Supports up to 256 RIRB 
entries (256 x 8 B = 2 KB). This register field may be written when the DMA engine is 
running. 
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18.2.27 RINTCNT—Response Interrupt Count Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 5Ah Attribute: R/W 
Default Value: 0000h Size: 16 bits 


re 
Reserved. 


N Response Interrupt Count — R/W. 


0000 0001b = 1 response sent to RIRB 


1111 1111b = 255 responses sent to RIRB 
0000 0000b = 256 responses sent to RIRB 


The DMA engine should be stopped when changing this field or else an interrupt may be 
lost. 

Note that each response occupies 2 dwords in the RIRB. 

This is compared to the total number of responses that have been returned, as opposed 
to the number of frames in which there were responses. If more than one codecs 
responds in one frame, then the count is increased by the number of responses 
received in the frame. 





18.2.28 RIRBCTL—RIRB Control Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address: HDBAR + 5Ch Attribute: R/W 
Default Value: 00h Size: 8 bits 


Et rr 


Response Overrun Interrupt Control — R/W. If this bit is set, the hardware will 
generate an interrupt when the Response Overrun Interrupt Status bit (HDBAR + 5Dh: 
bit 2) is set. 


Enable RIRB DMA Engine — R/W. 


0 = DMA stop 
1 = DMA run 


After software writes a 0 to this bit, the hardware may not stop immediately. The 
hardware will physically update the bit to 0 when the DMA engine is truly stopped. 
Software must read a 0 from this bit to verify that the DMA engine is truly stopped. 


Response Interrupt Control — R/W. 

0 = Disable Interrupt 

1 = Generate an interrupt after N number of responses are sent to the RIRB buffer OR 
when an empty Response slot is encountered on all SDI[x] inputs (whichever 
occurs first). The N counter is reset when the interrupt is generated. 
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18.2.29 RIRBSTS— RIRB Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 5Dh Attribute: R/WC 
Default Value: 00h Size: 8 bits 


a 


Response Overrun Interrupt Status — R/WC. 

1 = Software sets this bit to 1 when the RIRB DMA engine is not able to write the 
incoming responses to memory before additional incoming responses overrun the 
internal FIFO. When the overrun occurs, the hardware will drop the responses 
which overrun the buffer. An interrupt may be generated if the Response Overrun 
Interrupt Control bit is set. Note that this status bit is set even if an interrupt is not 
enabled for this event. 


Software clears this bit by writing a 1 to it. 


Reserved. 


Response Interrupt — R/WC. 

1 = Hardware sets this bit to 1 when an interrupt has been generated after N number 
of Responses are sent to the RIRB buffer OR when an empty Response slot is 
encountered on all SDI[x] inputs (whichever occurs first). Note that this status bit 
is set even if an interrupt is not enabled for this event. 


Software clears this bit by writing a 1 to it. 





18.2.30 RI RBSIZE— RIRB Size Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 5Eh Attribute: RO 
Default Value: 42h Size: 8 bits 


cena ema — 


RIRB Size Capability — RO. Hardwired to 0100b indicating that the ICH9 only 
supports a RIRB size of 256 RIRB entries (2048B) 


RIRB Size — RO. Hardwired to 10b which sets the CORB size to 256 entries (2048B) 


18.2.31 1C—Immediate Command Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 60h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


Immediate Command Write — R/ W. The command to be sent to the codec via the 





Immediate Command mechanism is written to this register. The command stored in this 
register is sent out over the link during the next available frame after a 1 is written to 
the ICB bit (HDBAR + 68h: bit 0) 
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18.2.32 IR—Immediate Response Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 64h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


Immediate Response Read (IRR) — RO. This register contains the response 
received from a codec resulting from a command sent via the Immediate Command 


mechanism. 

If multiple codecs responded in the same time, there is no assurance as to which 
response will be latched. Therefore, broadcast-type commands must not be issued via 
the Immediate Command mechanism. 





18.2.33 IRS—Immediate Command Status Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 68h Attribute: R/W, R/WC 
Default Value: 0000h Size: 16 bits 


LS 


Immediate Result Valid (IRV) — R/WC. 
1 = Set to 1 by hardware when a new response is latched into the Immediate Response 
1 register (HDBAR + 64). This is a status flag indicating that software may read the 


response from the Immediate Response register. 


Software must clear this bit by writing a 1 to it before issuing a new command so that 
the software may determine when a new response has arrived. 


link. When the corresponding response is latched into the | mmediate Response register, 
the controller hardware sets the IRV flag and clears the |CB bit back to 0. 


NOTE: An Immediate Command must not be issued while the CORB/RIRB mechanism 
is operating, otherwise the responses conflict. This must be enforced by 
software. 


Immediate Command Busy (ICB) — R/W. When this bit is read as 0, it indicates that 
a new command may be issued using the Immediate Command mechanism. When this 
bit transitions from a 0 to a 1 (via software writing a 1), the controller issues the 
command currently stored in the Immediate Command register to the codec over the 
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18.2.34 DPLBASE—DMA Position Lower Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 70h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


Ce asco 


DMA Position Lower Base Address — R/W. Lower 32 bits of the DMA Position Buffer 
Base Address. This register field must not be written when any DMA engine is running 
or the DMA transfer may be corrupted. This same address is used by the Flush Control 
and must be programmed with a valid value before the Flush Control bit 
(HDBAR+08h: bit 1) is set. 


DMA Position Lower Base Unimplemented bits — RO. Hardwired to 0 to force the 128- 
byte buffer alignment for cache line write optimizations. 


DMA Position Buffer Enable — R/W. 

1 = Controller will write the DMA positions of each of the DMA engines to the buffer in 
the main memory periodically (typically once per frame). Software can use this 
value to know what data in memory is valid data. 





18.2.35 DPUBASE—DMA Position Upper Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address: HDBAR + 74h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


DMA Position Upper Base Address — R/W. Upper 32 bits of the DMA Position Buffer 


Base Address. This register field must not be written when any DMA engine is running 
or the DMA transfer may be corrupted. 
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18.2.36 SDCTL—Stream Descriptor Control Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:|Input Stream[0]: HDBAR + 80h Attribute: R/W, RO 
Input Stream[1]: HDBAR + AOh 
Input Stream[2]: HDBAR + COh 
Input Stream[3]: HDBAR + EOh 
Output Stream[0]: HDBAR + 100h 
Output Stream[1]: HDBAR + 120h 
Output Stream[2]: HDBAR + 140h 
Output Stream[3]: HDBAR + 160h 
Default Value: 040000h Size: 24 bits 


a 


Stream Number — R/W. This value reflect the Tag associated with the data being 
transferred on the link. 


When data controlled by this descriptor is sent out over the link, it will have its stream 
number encoded on the SYNC signal. 


When an input stream is detected on any of the SDI signals that match this value, the 
data samples are loaded into FIFO associated with this descriptor. 


Note that while a single SDI input may contain data from more than one stream 
number, two different SDI inputs may not be configured with the same stream number. 


0000 = Reserved 
Stream 1 


1110 = Stream 14 
1111 = Stream 15 


Bidirectional Direction Control — RO. This bit is only meaningful for bidirectional 
streams; therefore, this bit is hardwired to 0. 


Traffic Priority — RO. Hardwired to 1 indicating that all streams will use VC1 if it is 
enabled through the PCI Express* registers. 


Stripe Control — RO. This bit is only meaningful for input streams; therefore, this bit is 
hardwired to 0. 


Descriptor Error Interrupt Enable — R/W. 
0 = Disable 
1 = An interrupt is generated when the Descriptor Error Status bit is set. 


FIFO Error Interrupt Enable — R/W. 

This bit controls whether the occurrence of a FIFO error (overrun for input or underrun 
for output) will cause an interrupt or not. If this bit is not set, bit 3in the Status register 
will be set, but the interrupt will not occur. Either way, the samples will be dropped. 


Interrupt on Completion Enable — R/W. 


This bit controls whether or not an interrupt occurs when a buffer completes with the 
IOC bit set in its descriptor. If this bit is not set, bit 2 in the Status register will be set, 
but the interrupt will not occur. 
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a 


Stream Run (RUN) — R/W. 


0 = DMA engine associated with this input stream will be disabled. The hardware will 
report a 0 in this bit when the DMA engine is actually stopped. Software must read 
a 0 from this bit before modifying related control registers or restarting the DMA 
engine. 

1 = DMA engine associated with this input stream will be enabled to transfer data from 
the FIFO to the main memory. The SSYNC bit must also be cleared in order for the 
DMA engine to run. For output streams, the cadence generator is reset whenever 


the RUN bit is set. 


Stream Reset (SRST) — R/W. 

0 = Writing a 0 causes the corresponding stream to exit reset. When the stream 
hardware is ready to begin operation, it will report a 0 in this bit. Software must 
read a 0 from this bit before accessing any of the stream registers. 

1 = Writing a 1 causes the corresponding stream to be reset. The Stream Descriptor 
registers (except the SRST bit itself) and FIFO’s for the corresponding stream are 
reset. After the stream hardware has completed sequencing into the reset state, it 
will report a 1 in this bit. Software must read a 1 from this bit to verify that the 
stream is in reset. The RUN bit must be cleared before SRST is asserted. 
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18.2.37 SDSTS—Stream Descriptor Status Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address:|Input Stream[0]: HDBAR + 83h Attribute: R/WC, RO 
Input Stream[1]: HDBAR + A3h 
Input Stream[2]: HDBAR + C3h 
Input Stream[3]: HDBAR + E3h 
Output Stream[0]: HDBAR + 103h 
Output Stream[1]: HDBAR + 123h 
Output Stream[2]: HDBAR + 143h 
Output Stream[3]: HDBAR + 163h 
Default Value: 00h Size: 8 bits 


a 


7:6 Reserved. 


FIFO Ready (FIFORDY) — RO. For output streams, the controller hardware will set 
this bit to 1 while the output DMA FIFO contains enough data to maintain the stream on 
the link. This bit defaults to 0 on reset because the FIFO is cleared on a reset. 


For input streams, the controller hardware will set this bit to 1 when a valid descriptor 
is loaded and the engine is ready for the RUN bit to be set. 


Descriptor Error — R/WC. 

1 = A serious error occurred during the fetch of a descriptor. This could be a result of a 
Master Abort, a parity or ECC error on the bus, or any other error which renders 
the current Buffer Descriptor or Buffer Descriptor list useless. This error is treated 
as a fatal stream error, as the stream cannot continue running. The RUN bit will be 
cleared and the stream will stopped. 


Software may attempt to restart the stream engine after addressing the cause of the 


error and writing a 1 to this bit to clear it. 


FIFO Error — R/WC. 

1 = FIFO error occurred. This bit is set even if an interrupt is not enabled. The bit is 
cleared by writing a 1 to it. 

For an input stream, this indicates a FIFO overrun occurring while the RUN bit is set. 

When this happens, the FIFO pointers do not increment and the incoming data is not 

written into the FIFO, thereby being lost. 

For an output stream, this indicates a FIFO underrun when there are still buffers to 

send. The hardware should not transmit anything on the link for the associated stream 

if there is not valid data to send. 


Buffer Completion Interrupt Status — R/WC. 


This bit is set to 1 by the hardware after the last sample of a buffer has been 
processed, AND if the Interrupt on Completion bit is set in the command byte of the 
buffer descriptor. It remains active until software clears it by writing a 1 to it. 
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18.2.38 


18.2.39 


746 


SDLPI B—Stream Descriptor Link Position in Buffer 
Register (Intel® High Definition Audio Controller—D27:FO) 


Memory Address:|Input Stream[0]: HDBAR + 84h Attribute: RO 
Input Stream[1]: HDBAR + A4h 
Input Stream[2]: HDBAR + C4h 
Input Stream[3]: HDBAR + E4h 
Output Stream[0]: HDBAR + 104h 
Output Stream[1]: HDBAR + 124h 
Output Stream[2]: HDBAR + 144h 
Output Stream[3]: HDBAR + 164h 


Default Value: 00000000h Size: 32 bits 


a 


Link Position in Buffer — RO. Indicates the number of bytes that have been received 


off the link. This register will count from 0 to the value in the Cyclic Buffer Length 
register and then wrap to 0. 





SDCBL—Stream Descriptor Cyclic Buffer Length Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:|nput Stream[0]: HDBAR + 88h Attribute: R/W 
Input Stream[1]: HDBAR + A8h 
Input Stream[2]: HDBAR + C8h 
Input Stream[3]: HDBAR + E8h 
Output Stream[0]: HDBAR + 108h 
Output Stream[1]: HDBAR + 128h 
Output Stream[2]: HDBAR + 148h 
Output Stream[3]: HDBAR + 168h 


Default Value: 00000000h Size: 32 bits 


a 


Cyclic Buffer Length — R/W. Indicates the number of bytes in the complete cyclic 
buffer. This register represents an integer number of samples. Link Position in Buffer 
will be reset when it reaches this value. 


Software may only write to this register after Global Reset, Controller Reset, or Stream 
Reset has occurred. This value should be only modified when the RUN bit is 0. Once the 
RUN bit has been set to enable the engine, software must not write to this register until 
after the next reset is asserted, or transfer may be corrupted. 
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18.2.40 


18.2.41 


SDLVI- —Stream Descriptor Last Valid Index Register 
(Intel® High Definition Audio Controller—D27:F0O) 


Memory Address:|nput Stream[0]: HDBAR + 8Ch Attribute: R/W 
Input Stream[1]: HDBAR + ACh 
Input Stream[2]: HDBAR + CCh 
Input Stream[3]: HDBAR + ECh 
Output Stream[0]: HDBAR + 10Ch 
Output Stream[1]: HDBAR + 12Ch 
Output Stream[2]: HDBAR + 14Ch 
Output Stream[3]: HDBAR + 16Ch 


Default Value: 0000h Size: 16 bits 


Last Valid Index — R/W. The value written to this register indicates the index for the 
last valid Buffer Descriptor in BDL. After the controller has processed this descriptor, it 


will wrap back to the first descriptor in the list and continue processing. 


This field must be at least 1, i.e. there must be at least 2 valid entries in the buffer 
descriptor list before DMA operations can begin. 


This value should only modified when the RUN bit is 0. 





SDFI FOW— Stream Descriptor Fl FO Watermark Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:|nput Stream[0]: HDBAR + 8Eh Attribute: R/W 
Input Stream[1]: HDBAR + AEh 
Input Stream[2]: HDBAR + CEh 
Input Stream[3]: HDBAR + EEh 
Output Stream[0]: HDBAR + 10Eh 
Output Stream[1]: HDBAR + 12Eh 
Output Stream[2]: HDBAR + 14Eh 
Output Stream[3]: HDBAR + 16Eh 


Default Value: 0004h Size: 16 bits 


FIFO Watermark (FI FOW) — R/W. Indicates the minimum number of bytes 
accumulated/free in the FIFO before the controller will start a fetch/eviction of data. 


010 = 8B 

011 = 16B 

100 = 32B (Default) 
101 = 64B 

Others = Unsupported 


NOTE: When the bit field is programmed to an unsupported size, the hardware sets 
itself to the default value. 

Software must read the bit field to test if the value is supported after setting the bit 

field. 
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18.2.42 SDFIFOS—Stream Descriptor FIFO Size Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:Input Stream[0]: HDBAR + 90h Attribute: Input: RO 


748 


Input Stream[1]: HDBAR + BOh Output: R/W 
Input Stream[2]: HDBAR + DOh 

Input Stream[3]: HDBAR + FOh 

Output Stream[0]: HDBAR + 110h 

Output Stream[1]: HDBAR + 130h 

Output Stream[2]: HDBAR + 150h 

Output Stream[3]: HDBAR + 170h 


Default Value: Input Stream: 0077h Size: 16 bits 


Output Stream: See Description. 


a 





FIFO Size — RO (Input stream), R/W (Output stream). Indicates the maximum 
number of bytes that could be fetched by the controller at one time. This is the 
maximum number of bytes that may have been DMA’d into memory but not yet 
transmitted on the link, and is also the maximum possible value that the PICB count 
will increase by at one time. 


The value in this field is different for input and output streams. It is also dependent on 
the Bits per Samples setting for the corresponding stream. Following are the values 
read/written from/to this register for input and output streams, and for non- padded 
and padded bit formats: 


Output Stream R/W value: 
Value Output Streams 


OFh = 16B , 16, 20, 24, or 32 bit Output Streams 
1Fh = 32B , 16, 20, 24, or 32 bit Output Streams 
3Fh = 64B , 16, 20, 24, or 32 bit Output Streams 
7Fh = 128B , 16, 20, 24, or 32 bit Output Streams 
BFh = 192B 8, 16, or 32 bit Output Streams (Default) 
FFh = 256B 20 or 24 bit Output Streams (Default) 
17Fh = 384B 8, 16, or 32 bit Output Streams 
1FFh = 512B 20 or 24 bit Output Streams 


NOTES: 

1. All other values not listed are not supported. 

2. When the output stream is programmed to an unsupported size, the hardware 
sets itself to the default value (BFh). 

3. Software must read the bit field to test if the value is supported after setting the 
bit field. 


Input Stream RO value: 
Value Input Streams 


77h = 120B 8, 16, 32 bit Input Streams 
9Fh = 160B 20, 24 bit Input Streams 


NOTE: The default value is different for input and output streams, and reflects the 
default state of the BITS fields (in Stream Descriptor Format registers) for the 
corresponding stream. 
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18.2.43 SDFMT—Stream Descriptor Format Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:|nput Stream[0]: HDBAR + 92h Attribute: R/W 
Input Stream[1]: HDBAR + B2h 
Input Stream[2]: HDBAR + D2h 
Input Stream[3]: HDBAR + F2h 
Output Stream[0]: HDBAR + 112h 
Output Stream[1]: HDBAR + 132h 
Output Stream[2]: HDBAR + 152h 
Output Stream[3]: HDBAR + 172h 


Default Value: 0000h Size: 16 bits 


Sample Base Rate Multiple — R/W 
000 = 48 kHz, 44.1 kHz or less 
= x2 (96 kHz, 88.2 kHz, 32 kHz) 
x3 (144 kHz) 
= x4 (192 kHz, 176.4 kHz) 
Others = Reserved. 


Sample Base Rate Devisor — R/W. 
000 = Divide by 1(48 kHz, 44.1 kHz) 
001 = Divide by 2 (24 kHz, 22.05 kHz) 
010 = Divide by 3 (16 kHz, 32 kHz) 
011 = Divide by 4 (11.025 kHz) 

100 = Divide by 5 (9.6 kHz) 

101 = Divide by 6 (8 kHz) 

110 = Divide by 7 

111 = Divide by 8 (6 kHz) 


Bits per Sample (BITS) — R/W. 
000 = 8 bits. The data will be packed in memory in 8-bit containers on 16-bit 
boundaries 


001 16 bits. The data will be packed in memory in 16-bit containers on 16-bit 
boundaries 

010 = 20 bits. The data will be packed in memory in 32-bit containers on 32-bit 
boundaries 

011 24 bits. The data will be packed in memory in 32-bit containers on 32-bit 
boundaries 

100 32 bits. The data will be packed in memory in 32-bit containers on 32-bit 
boundaries 

Others = Reserved. 

Number of Channels (CHAN) — R/W. Indicates number of channels in each frame of the 

stream. 

0000 =1 
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18.2.45 


750 


SDBDPL—Stream Descriptor Buffer Descriptor List Pointer 
Lower Base Address Register 
(Intel® High Definition Audio Controller—D27:FO) 


Memory Address:Input Stream[0]: HDBAR + 98h Attribute: R/W,RO 
Input Stream[1]: HDBAR + B8h 
Input Stream[2]: HDBAR + D8h 
Input Stream[3]: HDBAR + F8h 
Output Stream[0]: HDBAR + 118h 
Output Stream[1]: HDBAR + 138h 
Output Stream[2]: HDBAR + 158h 
Output Stream[3]: HDBAR + 178h 


Default Value: 00000000h Size: 32 bits 


a 


Buffer Descriptor List Pointer Lower Base Address — R/W. Lower address of the 


Buffer Descriptor List. This value should only be modified when the RUN bit is 0, or DMA 
transfer may be corrupted. 


| 6:0 | Hardwired to 0 forcing alignment on 128-B boundaries. 





SDBDPU—Stream Descriptor Buffer Descriptor List Pointer 
Upper Base Address Register (Intel® High Definition Audio 
Controller—D27:FO) 


Memory Address:|nput Stream[0]: HDBAR + 9Ch Attribute: R/W 
Input Stream[1]: HDBAR + BCh 
Input Stream[2]: HDBAR + DCh 
Input Stream[3]: HDBAR + FCh 
Output Stream[0]: HDBAR + 11Ch 
Output Stream[1]: HDBAR + 13Ch 
Output Stream[2]: HDBAR + 15Ch 
Output Stream[3]: HDBAR + 17Ch 


Default Value: 00000000h Size: 32 bits 


a 


Buffer Descriptor List Pointer Upper Base Address — R/W. Upper 32-bit address 
of the Buffer Descriptor List. This value should only be modified when the RUN bit is 0, 


or DMA transfer may be corrupted. 
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19.4 


SMBus Controller Registers 
(D31:F3) 


PCI Configuration Registers (SMBus—D31:F3) 


Table 19-1. SMBus Controller PCI Register Address Map (SMBus—D31:F3) 


19.1.1 





ee eee ee | 
O0Oh-O1h Vendor | dentification | 8086 


02h- 03h Device Identification ae — 
description 


|e me 
[F[Rewranmningrorace ah 
[sce [ub Gass code =H 
[ace [ase Gass coe ch 


SMBMBARO Memory Base Address Register 0 00000004h 
(Bit 31:0) 
Memory Based Address Register 1 

SMBMBAR1 (Bit 63:32) 00000000h 


INT_PN | Interrupt Pin see Tegister 
description 


NOTE: Registers that are not shown should be treated as Reserved (See Section 9.2 for details). 


viD—Vendor Identification Register (SMBus—D31:F3) 


Address: 0Oh-O1h Attribute: RO 
Default Value: 8086h Size: 16 bits 


Pe scp 





Vendor ID — RO. This is a 16-bit value assigned to Intel 
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19.1.2 DI D—Device Identification Register (SMBus—D31:F3) 


Address: 02h-03h Attribute: RO 
Default Value: See bit description Size: 16 bits 


Device ID — RO. This is a 16-bit value assigned to the Intel® I1CH9 SMBus controller. 


Refer to the Intel® I/O Controller Hub (ICH9) Family Specification Update for the value 
of the Device ID Register. 





19.1.3 PCI CMD—PCI Command Register (SMBus—D31:F3) 


Address: 04h-05h Attributes: RO, R/W 
Default Value: 0000h Size: 16 bits 


a 
15:11 | Reserved 


Interrupt Disable — R/W. 

0 = Enable 

1 = Disables SMBus to assert its PIRQB# signal. 

Fast Back to Back Enable (FBE) — RO. Hardwired to 0. 


SERR# Enable (SERR_EN) — R/W. 

0 = Enables SERR# generation. 

1 = Disables SERR# generation. 

Wait Cycle Control (WCC) — RO. Hardwired to 0. 


Parity Error Response (PER) — R/W. 


0 = Disable 
1 = Sets Detected a Error bit (D31:F3:06, bit 15) when a parity error is detected. 


Postable Memory Write Enable (PMWE) — RO. Hardwired to 0. 
Special Cycle Enable (SCE) — RO. Hardwired to 0. 


Bus Master Enable (BME) — RO. Hardwired to 0. 


Memory Space Enable (MSE) — R/W. 


0 = Disables memory mapped config space. 
1 = Enables memory mapped config space. 


1/ O Space Enable (1OSE) — R/W. 

0 = Disable 

1 = Enables access to the SM Bus I/O space registers as defined by the Base Address 
Register. 





a 
a 
=" 
a 
a 
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19.1.4 PCISTS—PCI Status Register (SMBus—D31:F3) 


Address: O06h-07h Attributes: RO 
Default Value: 0280h Size: 16 bits 
Note: For the writable bits, software must write a 1 to clear bits that are set. Writing a 0 to 


the bit has no effect. 


Detected Parity Error (DPE) — R/WC. 
0 = No parity error detected. 
1 = Parity error detected. 


Signaled System Error (SSE) — R/WC. 
0 = No system error detected. 
1 = System error detected. 


Received Master Abort (RMA) — RO. Hardwired to 0. 
Received Target Abort (RTA) — RO. Hardwired to 0. 
Signaled Target Abort (STA) — RO. Hardwired to 0. 
DEVSEL# Timing Status (DEVT) — RO. This 2-bit field defines the timing for 
10:9 | DEVSEL# assertion for positive decode. 
01 = Medium timing. 


Data Parity Error Detected (DPED) — RO. Hardwired to 0. 
Fast Back to Back Capable (FB2BC) — RO. Hardwired to 1. 
User Definable Features (UDF) — RO. Hardwired to 0. 


66 MHz Capable (66MHZ_CAP) — RO. Hardwired to 0. 


Capabilities List (CAP_LIST) — RO. Hardwired to 0 because there are no capability list 
structures in this function 


Interrupt Status (INTS) — RO. This bit indicates that an interrupt is pending. It is 
independent from the state of the Interrupt Enable bit in the PC] Command register. 


19.1.5 RI D—Revision I dentification Register (SMBus—D31:F3) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


ee ae 





Revision ID — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family Specification 
Update for the value of the Revision ID Register. 
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19.1.6 


19.1.7 


19.1.8 


19.1.9 
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Pl —Programming Interface Register (SMBus—D31:F3) 


Offset Address: 09h Attribute: RO 
Default Value: 00h Size: 8 bits 


sr 





SCC—Sub Class Code Register (SMBus—D31:F3) 


Address Offset: OAh Attributes: RO 
Default Value: O5h Size: 8 bits 


7:0 Sub Class Code (SCC) — RO. 
05h = SM Bus serial controller 
BCC—Base Class Code Register (SMBus—D31:F3) 


Address Offset: OBh Attributes: RO 
Default Value: O0Ch Size: 8 bits 


| Bit | Description 
Base Class Code (BCC) — RO. 
OCh = Serial controller. 
SMBMBARO—D31_F3_SMBus Memory Base Address 0 
(SMBus—D31:F3) 


Address Offset: 10-13h Attributes: R/W, RO 
Default Value: 00000004h Size: 32 bits 


| Bit | Description 
. Base Address — R/W. Provides the 32 byte system memory base address for the Intel 
31:8 : 
ICH9 SMB logic. 
7:4 


Reserved 


Description 








Prefetchable (PREF) — RO. Hardwired to 0. Indicates that SMBMBAR is not pre- 
fetchable. 


anywhere in 64 bit address space. Hardwired to 10b. 


Memory Space Indicator — RO. This read-only bit always is 0, indicating that the 
SMB logic is Memory mapped. 





Address Range (ADDRNG) — RO. Indicates that this SMBMBAR can be located 
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19.1.10 SMBMBAR1—D31_F3_SMBus Memory Base Address 1 


19.1.11 


19.1.12 


(SMBus—D31:F3) 
Address Offset: 14h-17h Attributes: R/W 
Default Value: 00000000h Size: 32 bits 


} Bit | Description 





. Base Address — R/W. Provides bits 63-32 system memory base address for the Intel 
31:0 : 
ICH9 SMB logic. 


SMB_BASE—SMBus Base Address Register 


(SMBus—D31:F3) 
Address Offset: 20-23h Attribute: R/W, RO 
Default Value: |00000001h Size: 32-bits 


CS rr ae 
31:16 | Reserved — RO 


' Base Address — R/W. This field provides the 32-byte system I/O base address for the 
15:5 : 
ICH9 SMB logic. 


Reserved — RO 
| 0 | 10 Space Indicator — RO. Hardwired to 1 indicating that the SMB logic is |/O mapped. 


SVID—Subsystem Vendor Identification Register 
(SMBus—D31:F2/ F4) 





Address Offset: 2Ch-2Dh Attribute: RO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


ee 


Subsystem Vendor ID (SVID) — RO. The SVID register, in combination with the 
Subsystem ID (SID) register, enables the operating system (OS) to distinguish 


subsystems from each other. 
NOTE: Software can write to this register only once per core well reset. Writes should 
be done as a single 16-bit cycle. 





Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 755 


] ® 
| n tel ) SMBus Controller Registers (D31:F3) 


19.1.13 


19.1.14 


19.1.15 
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SID—Subsystem | dentification Register 
(SMBus—D31:F2/ F4) 


Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Core 


a 


Subsystem ID (SID) — R/WO. The SID register, in combination with the SVID register, 


enables the operating system (OS) to distinguish subsystems from each other. 
NOTE: Software can write to this register only once per core well reset. Writes should 
be done as a single 16-bit cycle. 





INT_LN—Interrupt Line Register (SMBus—D31:F3) 


Address Offset: 3Ch Attributes: R/W 
Default Value: 00h Size: 8 bits 


a 


Interrupt Line (INT_LN) — R/W. This data is not used by the ICH9. It is to 
communicate to software the interrupt line that the interrupt pin is connected to 
PIRQB#. 





INT_PN—Interrupt Pin Register (SMBus—D31:F3) 


Address Offset: 3Dh Attributes: RO 
Default Value: See description Size: 8 bits 


| Bit | Description 





7:0 Interrupt PIN (INT_PN) — RO. This reflects the value of D31IP.SMIP in chipset 
‘i configuration space. 
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19.1.16 HOSTC—Host Configuration Register (SMBus—D31:F3) 


Address Offset: 40h Attribute: R/W 
Default Value: 00h Size: 8 bits 


a 


7:4 


Reserved 


SSRESET - Soft SMBus Reset— R/W. 

0 = The HW will reset this bit to 0 when SMBus reset operation is completed. 
1 = The SMBus state machine and logic in ICH9 is reset. 

17C_EN — R/W. 

0 = SMBus behavior. 


1 = The ICH9 is enabled to communicate with I7C devices. This will change the 
formatting of some commands. 


SMB_SMI_EN — R/W. 

0 = SMBus interrupts will not generate an SMI#. 

1 = Any source of an SMB interrupt will instead be routed to generate an SMI#. Refer 
to Section 5.20.4 (Interrupts / SMI#). 
This bit needs to be set for SMBALERT# to be enabled. 


SMBus Host Enable (HST_EN) — R/W. 

0 = Disable the SMBus Host controller. 

1 = Enable. The SMB Host controller interface is enabled to execute commands. The 
INTREN bit (offset SMBASE + 02h, bit 0) needs to be enabled for the SMB Host 
controller to interrupt or SMI#. Note that the SMB Host controller will not respond 
to any new requests until all interrupt requests have been cleared. 
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19.2 SMBus I/ O and Memory Mapped I|/ O Registers 


The following SMBus registers can be accessed through I/O BAR or Memory BAR 
registers in PCI configuration space. The offsets are the same for both I/O and Memory 
Mapped I/O registers. 


Table 19-2. SMBus I/O and Memory Mapped I/ O Register Address Map 


SMB_ BASE ; 


or aon | _niw Wo 
08h PEC 00h R/W 


SMLink Pin Control (TCO See register 
OEh SMLINK_PIN_CTL Compatible Mode) R/W, RO 
OFh SMBus_PIN_CTL SMBus Pin Control R/W, RO 
Ss description 
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HST_STS—Host Status Register (SMBus—D31:F3) 


Register Offset: SMBASE + 00h Attribute: R/WC, RO 
Default Value: OOh Size: 8-bits 


All status bits are set by hardware and cleared by the software writing a one to the 
particular bit position. Writing a 0 to any bit position has no effect. 


ee ee 


Byte Done Status (DS) — R/WC. 

0 = Software can clear this by writing a 1 to it. 

1 = Host controller received a byte (for Block Read commands) or if it has completed 
transmission of a byte (for Block Write commands) when the 32-byte buffer is not 
being used. Note that this bit will be set, even on the last byte of the transfer. This 
bit is not set when transmission is due to the LAN interface heartbeat. 


This bit has no meaning for block transfers when the 32-byte buffer is enabled. 


NOTE: When the last byte of a block message is received, the host controller will set 
this bit. However, it will not immediately set the INTR bit (bit 1 in this register). 
When the interrupt handler clears the DS bit, the message is considered 
complete, and the host controller will then set the INTR bit (and generate 
another interrupt). Thus, for a block message of n bytes, the |CH9 will generate 
n+1 interrupts. The interrupt handler needs to be implemented to handle these 
cases. When not using the 32 Byte Buffer, hardware will drive the SMBCLK 
signal low when the DS bit is set until SW clears the bit. This includes the last 
byte of a transfer. Software must clear the DS bit before it can clear the BUSY 
bit. 

INUSE_ STS — R/W. This bit is used as semaphore among various independent 

software threads that may need to use the ICH9’s SMBus logic, and has no other effect 

on hardware. 


O = After a full PCI reset, a read to this bit returns a 0. 
1 = After the first read, subsequent reads will return a 1. A write of a 1 to this bit will 


reset the next read value to 0. Writing a 0 to this bit has no effect. Software can 
poll this bit until it reads a 0, and will then own the usage of the host controller. 


SMBALERT_ STS — R/WC. 

0 = Interrupt or SMI# was not generated by SMBALERT#. Software clears this bit by 
writing a 1 to it. 

1 = The source of the interrupt or SMI# was the SMBALERT#¥ signal. This bit is only 
cleared by software writing a 1 to the bit position or by RSMRST# going low. 


If the signal is programmed as a GPIO, then this bit will never be set. 


FAILED — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = The source of the interrupt or SMI# was a failed bus transaction. This bit is set in 
response to the KILL bit being set to terminate the host transaction. 


BUS_ERR — R/WC. 


0 = Software clears this bit by writing a 1 to it. 
1 = The source of the interrupt of SMI # was a transaction collision. 


DEV_ERR — R/WC. 
0 = Software clears this bit by writing a 1 to it. The ICH9 will then deassert the 
interrupt or SMI #. 
1 = The source of the interrupt or SMI# was due to one of the following: 
* Invalid Command Field, 
¢ Unclaimed Cycle (host initiated), 
¢« Host Device Time-out Error. 
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INTR — R/WC. This bit can only be set by termination of a command. INTR is not 

dependent on the INTREN bit (offset SMBASE + 02h, bit 0) of the Host controller 

register (offset 02h). It is only dependent on the termination of the command. If the 

INTREN bit is not set, then the INTR bit will be set, although the interrupt will not be 

generated. Software can poll the INTR bit in this non-interrupt case. 

0 = Software clears this bit by writing a 1 to it. The ICH9 then deasserts the interrupt 
or SMI#. 

1 = The source of the interrupt or SMI# was the successful completion of its last 
command. 


HOST_BUSY — R/WC. 


0 = Cleared by the |CH9 when the current transaction is completed. 

1 = Indicates that the |CH9 is running a command from the host interface. No SMB 
registers should be accessed while this bit is set, except the BLOCK DATA BYTE 
Register. The BLOCK DATA BYTE Register can be accessed when this bit is set only 
when the SMB_CMD bits in the Host Control Register are programmed for Block 
command or IC Read command. This is necessary in order to check the 
DONE_STS bit. 





HST_CNT—Host Control Register (SMBus—D31:F3) 


Register Offset: SMBASE + 02h Attribute: R/W, WO 
Default Value: OOh Size: 8-bits 


A read to this register will clear the byte pointer of the 32-byte buffer. 


PEC_EN. — R/W. 

0 = SMBus host controller does not perform the transaction with the PEC phase 
appended. 

1 = Causes the host controller to perform the SMBus transaction with the Packet Error 
Checking phase appended. For writes, the value of the PEC byte is transferred from 
the PEC Register. For reads, the PEC byte is loaded in to the PEC Register. This bit 
must be written prior to the write in which the START bit is set. 


START — WO. 

0 = This bit will always return 0 on reads. The HOST_BUSY bit in the Host Status 
register (offset 00h) can be used to identify when the Intel® ICH9 has finished the 
command. 

1 = Writing a 1 to this bit initiates the command described in the SMB_CMD field. All 
registers should be setup prior to writing a 1 to this bit position. 


LAST_BYTE — WO. This bit is used for Block Read commands. 
1 = Software sets this bit to indicate that the next byte will be the last byte to be 


received for the block. This causes the ICH9 to send a NACK (instead of an ACK) 
after receiving the last byte. 


NOTE: Once the SECOND_TO_STS bit in TCO2_STS register (D31:FO, TCOBASE+6h, 
bit 1) is set, the LAST_BYTE bit also gets set. While the SECOND_TO_STS bit is 
set, the LAST_BYTE bit cannot be cleared. This prevents the ICH9 from running 
some of the SMBus commands (Block Read/Write, 12C Read, Block IC Write). 
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SMB_CMD — R/W. The bit encoding below indicates which command the ICH9 is to 
perform. If enabled, the ICH9 will generate an interrupt or SMI# when the command 
has completed If the value is for a non-supported or reserved command, the ICH9 will 
set the device error (DEV_ERR) status bit (offset SMBASE + 00h, bit 2) and generate 
an interrupt when the START bit is set. The ICH9 will perform no command, and will not 
operate until DEV_ERR is cleared. 

000 = Quick: The slave address and read/write value (bit 0) are stored in the 
transmit slave address register. 

001 Byte: This command uses the transmit slave address and command registers. 
Bit O of the slave address register determines if this is a read or write 
command. 

Byte Data: This command uses the transmit slave address, command, and 
DATAO registers. Bit 0 of the slave address register determines if this is a read 
or write command. If it is a read, the DATAO register will contain the read data. 


Word Data: This command uses the transmit slave address, command, DATAO 
and DATA1 registers. Bit 0 of the slave address register determines if this is a 
read or write command. If it is a read, after the command completes, the 
DATAO and DATAI1 registers will contain the read data. 


Process Call: This command uses the transmit slave address, command, 
DATAO and DATAI registers. Bit 0 of the slave address register determines if 
this is a read or write command. After the command completes, the DATAO and 
DATAI1 registers will contain the read data. 


Block: This command uses the transmit slave address, command, DATAO 
registers, and the Block Data Byte register. For block write, the count is stored 
in the DATAO register and indicates how many bytes of data will be transferred. 
For block reads, the count is received and stored in the DATAO register. Bit 0 of 
the slave address register selects if this is a read or write command. For writes, 
data is retrieved from the first n (where n is equal to the specified count) 
addresses of the SRAM array. For reads, the data is stored in the Block Data 
Byte register. 

12C Read: This command uses the transmit slave address, command, DATAO, 
DATA1 registers, and the Block Data Byte register. The read data is stored in 
the Block Data Byte register. The |CH9 continues reading data until the NAK is 
received. 

Block Process: This command uses the transmit slave address, command, 
DATAO and the Block Data Byte register. For block write, the count is stored in 
the DATAO register and indicates how many bytes of data will be transferred. 
For block read, the count is received and stored in the DATAO register. Bit 0 of 
the slave address register always indicate a write command. For writes, data is 
retrieved from the first m (where m is equal to the specified count) addresses 
of the SRAM array. For reads, the data is stored in the Block Data Byte register. 
E32B bit in the Auxiliary Control register must be set for this command to work. 


KILL — R/W. 

0 = Normal SMBus host controller functionality. 

1 = Kills the current host transaction taking place, sets the FAILED status bit, and 
asserts the interrupt (or SMI#). This bit, once set, must be cleared by software to 
allow the SMBus host controller to function normally. 


INTREN — R/W. 


0 = Disable. 
1 = Enable the generation of an interrupt or SMI# upon the completion of the 
command. 
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19.2.3 


19.2.4 


19.2.5 


19.2.6 


762 


HST_CMD—Host Command Register (SMBus—D31:F3) 


Register Offset: SMBASE + 03h Attribute: R/W 
Default Value: OOh Size: 8 bits 


| Bit Description 


7:0 This 8-bit field is transmitted by the host controller in the command field of the SMBus 
, protocol during the execution of any command. 
XMIT_SLVA—Transmit Slave Address Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 04h Attribute: R/W 
Default Value: OOh Size: 8 bits 





This register is transmitted by the host controller in the slave address field of the 
SMBus protocol. 


LS 
Address — R/W. This field provides a 7-bit address of the targeted slave. 


RW — R/W. Direction of the host transfer. 
0 = Write 
1 = Read 





HST_DO—Host Data O Register (SMBus—D31:F3) 


Register Offset: SMBASE + 05h Attribute: R/W 
Default Value: OOh Size: 8 bits 


a 


Data0/ Count — R/W. This field contains the 8-bit data sent in the DATAO field of the 
SMBus protocol. For block write commands, this register reflects the number of bytes to 
transfer. This register should be programmed to a value between 1 and 32 for block 
counts. A count of 0 or a count above 32 will result in unpredictable behavior. The host 
controller does not check or log invalid block counts. 





HST_D1—Host Data 1 Register (SMBus—D31:F3) 


Register Offset: SMBASE + 06h Attribute: R/W 
Default Value: O0Oh Size: 8 bits 


a 


Datal — R/W. This 8-bit register is transmitted in the DATA1 field of the SMBus 
protocol during the execution of any command. 
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19.2.7 


19.2.8 


Host_BLOCK_DB—Host Block Data Byte Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 07h Attribute: R/W 
Default Value: OOh Size: 8 bits 


C2 rr aa 


Block Data (BDTA) — R/W. This is either a register, or a pointer into a 32-byte block 
array, depending upon whether the E32B bit is set in the Auxiliary Control register. 
When the E32B bit (offset SMBASE + ODh, bit 1) is cleared, this is a register containing 
a byte of data to be sent on a block write or read from on a block read, just as it 
behaved on the ICH3. 


When the E32B bit is set, reads and writes to this register are used to access the 32- 
byte block data storage array. An internal index pointer is used to address the array, 
which is reset to 0 by reading the HCTL register (offset 02h). The index pointer then 
increments automatically upon each access to this register. The transfer of block data 
into (read) or out of (write) this storage array during an SMBus transaction always 
starts at index address 0. 


When the E2B bit is set, for writes, software will write up to 32-bytes to this register as 
part of the setup for the command. After the Host controller has sent the Address, 


Command, and Byte Count fields, it will send the bytes in the SRAM pointed to by this 
register. 

When the E2B bit is cleared for writes, software will place a single byte in this register. 
After the host controller has sent the address, command, and byte count fields, it will 
send the byte in this register. If there is more data to send, software will write the next 
series of bytes to the SRAM pointed to by this register and clear the DONE_STS bit. The 
controller will then send the next byte. During the time between the last byte being 
transmitted to the next byte being transmitted, the controller will insert wait-states on 
the interface. 

When the E2B bit is set for reads, after receiving the byte count into the DataO register, 
the first series of data bytes go into the SRAM pointed to by this register. If the byte 
count has been exhausted or the 32-byte SRAM has been filled, the controller will 
generate an SMI# or interrupt (depending on configuration) and set the DONE_STS bit. 
Software will then read the data. During the time between when the last byte is read 
from the SRAM to when the DONE_STS bit is cleared, the controller will insert wait- 
states on the interface. 


PEC—Packet Error Check (PEC) Register 





(SMBus—D31:F3) 
Register Offset: SMBASE + 08h Attribute: R/W 
Default Value: OOh Size: 8 bits 


2 rr re 


PEC_ DATA — R/W. This 8-bit register is written with the 8-bit CRC value that is used 
as the SMBus PEC data prior to a write transaction. For read transactions, the PEC data 


is loaded from the SMBus into this register and is then read by software. Software must 
ensure that the INUSE_STS bit is properly maintained to avoid having this field over- 
written by a write transaction following a read transaction. 
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19.2.9 


19.2.10 


19.2.11 


764 


RCV_SLVA—Receive Slave Address Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 09h Attribute: R/W 
Default Value: 44h Size: 8 bits 
Lockable: No Power Well: Resume 


Pa freed OCS 
eo SLAVE_ADDR — R/W. This field is the slave address that the Intel® ICH9 decodes for 


read and write cycles. the default is not 0, so the SMBus Slave Interface can respond 
even before the processor comes up (or if the processor is dead). This register is 
cleared by RSMRST#, but not by PLTRST#. 





SLV_DATA—Receive Slave Data Register (SMBus—D31:F3) 


Register Offset: SMBASE + OAh-OBh Attribute: RO 
Default Value: 0000h Size: 16 bits 
Lockable: No Power Well: Resume 


This register contains the 16-bit data value written by the external SMBus master. The 
processor can then read the value from this register. This register is reset by RSMRST#, 
but not PLTRST# 


a 


15:8 Data Message Byte 1 (DATA_MSG1) — RO. See Section 5.20.7 for a discussion of 
this field. 


} 70 | Data Message Byte 0 (DATA_MSGO) — RO. See Section 5.20.7 for a discussion of 
this field. 


AUX_STS—Auxiliary Status Register (SMBus—D31:F3) 





Register Offset: SMBASE + OCh Attribute: R/WC, RO 
Default Value: 00h Size: 8 bits 
Lockable: No Power Well: Resume 


pra freed CSCS 
SMBus TCO Mode (STCO) — RO. This bit reflects the strap setting of TCO compatible 
mode vs. Advanced TCO mode. 
1 


0 = Intel® 1CH9 is in the compatible TCO mode. 
1 = 1CH9 is in the advanced TCO mode. 


controller if a software abort occurs in the middle of the CRC portion of the cycle or 
an abort happens after the |CH9 has received the final data bit transmitted by an 
external slave. 





CRC Error (CRCE) — R/WC. 

0 = Software clears this bit by writing a 1 to it. 

1 = This bit is set if a received message contained a CRC error. When this bit is set, the 
DERR bit of the host status register will also be set. This bit will be set by the 
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19.2.12 AUX_CTL—Auxiliary Control Register (SMBus—D31:F3) 


Register Offset: SMBASE + ODh Attribute: R/W 
Default Value: 00h Size: 8 bits 
Lockable: No Power Well: Resume 


7:2 Reserved 


Enable 32-Byte Buffer (E32B) — R/W. 
0 = Disable. 
1 1 = Enable. When set, the Host Block Data register is a pointer into a 32-byte buffer, as 


opposed to a single register. This enables the block commands to transfer or receive 
up to 32-bytes before the ICH9 generates an interrupt. 


Automatically Append CRC (AAC) — R/W. 

0 =1CH9 will Not automatically append the CRC. 

1 = The ICH9 will automatically append the CRC. This bit must not be changed during 
SMBus transactions or undetermined behavior will result. It should be programmed 
only once during the lifetime of the function. 





19.2.13  SMLINK_PIN_CTL—SMLink Pin Control Register 


(SMBus—D31:F3) 

Register Offset: SMBASE + OEh Attribute: R/W, RO 

Default Value: See below Size: 8 bits 
Note: This register is in the resume well and is reset by RSMRST#. 


This register is only applicable in the TCO compatible mode. 


ee ee 


SMLINK_CLK_CTL — R/W. 


0 = 1CH9 will drive the SMLINKO pin low, independent of what the other SMLINK logic 
would otherwise indicate for the SMLINKO pin. 

1 = The SMLINKO pin is not overdriven low. The other SMLINK logic controls the state 
of the pin. (Default) 


SMLINK1_CUR_STS — RO. This read-only bit has a default value that is dependent on 


an external signal level. This pin returns the value on the SMLINK1 pin. This allows 
software to read the current state of the pin. 

0 = Low 

1 = High 


SMLINKO_CUR_ STS — RO. This read-only bit has a default value that is dependent on 
an external signal level. This pin returns the value on the SMLINKO pin. This allows 
software to read the current state of the pin. 

0 = Low 

1 = High 
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19.2.14 SMBus_PIN_CTL—SMBus Pin Control Register 


(SMBus—D31:F3) 

Register Offset: SMBASE + OFh Attribute: R/W, RO 

Default Value: See below Size: 8 bits 
Note: This register is in the resume well and is reset by RSMRST#. 


SMBCLK_CTL — R/W. 

1 = The SMBCLK pin is not overdriven low. The other SMBus logic controls the state of 
the pin. 

0 = 1CH9 drives the SMBCLK pin low, independent of what the other SMB logic would 
otherwise indicate for the SMBCLK pin. (Default) 


SMBDATA_CUR_STS — RO. This read-only bit has a default value that is dependent 


on an external signal level. This pin returns the value on the SMBDATA pin. This allows 
software to read the current state of the pin. 

0 = Low 

1 = High 

SMBCLK_CUR_ STS — RO. This read-only bit has a default value that is dependent on 
an external signal level. This pin returns the value on the SMBCLK pin. This allows 
software to read the current state of the pin. 

0 = Low 

1 = High 





19.2.15 SLV_STS—Slave Status Register (SMBus—D31:F3) 


Register Offset: SMBASE + 10h Attribute: R/WC 
Default Value: OOh Size: 8 bits 
Note: This register is in the resume well and is reset by RSMRST#. 


All bits in this register are implemented in the 64 kHz clock domain. Therefore, 
software must poll this register until a write takes effect before assuming that a write 
has completed internally. 


HOST_NOTIFY_STS — R/WC. The !CH9 sets this bit to a 1 when it has completely 
received a successful Host Notify Command on the SMLink pins. Software reads this bit 


to determine that the source of the interrupt or SMI # was the reception of the Host 
Notify Command. Software clears this bit after reading any information needed from 
the Notify address and data registers by writing a 1 to this bit. Note that the ICH9 will 
allow the Notify Address and Data registers to be over-written once this bit has been 
cleared. When this bit is 1, the |CH9 will NACK the first byte (host address) of any new 
“Host Notify” commands on the SMLink. Writing a 0 to this bit has no effect. 
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19.2.16 SLV_CMD—Slave Command Register (SMBus—D31:F3) 


Note: 


19.2.17 


Note: 


Register Offset: SMBASE + 11h Attribute: R/W 
Default Value: OOh Size: 8 bits 


This register is in the resume well and is reset by RSMRST#. 


LS 
Reserved 


SMBALERT_DIS — R/W. 


0 = Allows the generation of the interrupt or SMI #. 

1 = Software sets this bit to block the generation of the interrupt or SMI # due to the 
SMBALERT# source. This bit is logically inverted and ANDed with the 
SMBALERT_STS bit (offset SMBASE + 00h, bit 5). The resulting signal is distributed 
to the SMI# and/or interrupt generation logic. This bit does not effect the wake 
logic. 


HOST_NOTIFY_WKEN — R/W. Software sets this bit to 1 to enable the reception of a 
Host Notify command as a wake event. When enabled this event is “OR’d" in with the 


other SMBus wake events and is reflected in the SMB_WAK_STS bit of the General 
Purpose Event 0 Status register. 

0 = Disable 

1 = Enable 


HOST_NOTIFY_INTREN — R/W. Software sets this bit to 1 to enable the generation 
of interrupt or SMI# when HOST_NOTIFY_STS (offset SMBASE + 10h, bit 0) is 1. This 
enable does not affect the setting of the HOST_NOTIFY_STS bit. When the interrupt is 
generated, either PIRQB# or SMI# is generated, depending on the value of the 
SMB_SMI_EN bit (D31:F3:40h, bit 1). If the HOST_NOTIFY_STS bit is set when this bit 
is written to a 1, then the interrupt (or SMI#) will be generated. The interrupt (or 
SMI #) is logically generated by AND’ing the STS and INTREN bits. 

0 = Disable 

1 = Enable 





NOTIFY_DADDR—Notify Device Address Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 14h Attribute: RO 
Default Value: OOh Size: 8 bits 


This register is in the resume well and is reset by RSMRST#. 


Peat 


DEVICE_ADDRESS — RO. This field contains the 7-bit device address received during 
the Host Notify protocol of the SMBus 2.0 Specification. Software should only consider 


this field valid when the HOST_NOTIFY_STS bit (D31:F3:SMBASE +10, bit 0) is set to 
I, 


| 0 | Reserved 
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19.2.18 


Note: 


19.2.19 


Note: 
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NOTIFY_DLOW—Notify Data Low Byte Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 16h Attribute: RO 
Default Value: OOh Size: 8 bits 


This register is in the resume well and is reset by RSMRST#. 


Pe etn 


DATA_LOW_ BYTE — RO. This field contains the first (low) byte of data received 


during the Host Notify protocol of the SMBus 2.0 specification. Software should only 
consider this field valid when the HOST_NOTIFY_STS bit (D31:F3: SMBASE +10, bit 0) 
is set to 1. 





NOTIFY_DHIGH—Notify Data High Byte Register 
(SMBus—D31:F3) 


Register Offset: SMBASE + 17h Attribute: RO 
Default Value: OOh Size: 8 bits 


This register is in the resume well and is reset by RSMRST#. 


a 


DATA_HIGH_BYTE — RO. This field contains the second (high) byte of data received 
during the Host Notify protocol of the SMBus 2.0 specification. Software should only 


consider this field valid when the HOST_NOTIFY_STS bit (D31:F3: SMBASE +10, bit 0) 
is set to 1. 
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20.1 


Note: 


Table 20-1. 


PCI Express* Configuration 
Registers 


PCI Express* Configuration Registers 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Register address locations that are not shown in Table 20-1 and should be treated as 
Reserved. 


PCI Express* Configuration Registers Address Map 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) (Sheet 1 of 3) 


; Function 0-5 
See register 
02h-03h | Device | dentification 


rearanming nterace | —_o0h | 
/ oon J 
T__ [Primary teteney Timer [00h 
FEADNP [Header S| 


1Eh-1Fh SSTS Secondary Status Register 0000h R/WC 
20h-23h MBL Memory Base and Limit 00000000h R/W 


24h-27h PMBL en Memory Bas- aid 00010001h_ | R/W, RO 
28h-2Bh pmpu32__| Prefetchable Memory Base Upper | gg gggoo0h R/W 

32 Bits 
2Ch-2Fh PMLU32 aaa Memory Limit Upper | gggq9000h 


34h CAPP Capabilities List Pointer 


: See bit 
3Ch-3Dh INTR Interrupt Information R/W, RO 


I 

ooh [IW 
R/W 

SL Oh 


08h 
09h 
Ah 
Bh 
Ch 
Dh 
OEh 
1Bh 


Revision Identification See register 
description 


3Eh-3Fh BCTRL Bridge Control Register 0000h R/W 
40h-41h CLIST Capabilities List 8010 
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Table 20-1. PCI Express* Configuration Registers Address Map 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) (Sheet 2 of 3) 


Function 0-5 
| mnemonic | enced cid _— = 


42h- 43h XCAP PCI Express* Capabilities 0041 R/WO, RO 


44h- 47h DCAP Device Capabilities OOOOOFEOh 


; ae See bit R/W, RO, 

4Ch- 4Fh LCAP Link Capabilities R/WO 

50h-51h LCTL Link Control 0000h ies 
description 

54h-57h SLCAP Slot Capabilities Register 00000060h R/WO, RO 

58h- 59h SLCTL Slot Control R/W, RO 


Message Signaled Interrupt 
82h-83h MC Message Signaled Interrupt 
Message Control 
84h-87h MA Message Signaled Interrupt 00000000h R/W 
Message Address 
D 
C 
Pi 


= 


88h-89h M Message Signaled Interrupt 0000h R/W 
Message Data 
90h-91h Subsystem Vendor Capability A00Dh 


94h-97h SVID Subsystem Vendor Identification 00000000h R/WO 
AOh-Al1h PMCAP Power Management Capability 0001h 


AP 
A2h-A3h PMC PCI Power Management c802h 
Capability 
A4-ATh PMCS PCI Power Management Control 00000000h R/W, RO 
and Status 
D4-D7h MPC? Miscellaneous Port Configuration 00000000h R/W, RO 
Cc 


D8-DBh Miscellaneous Port Configuration 08110000h R/W 
DC-DFh SMSCS SMI/SCI Status Register 00000000h R/WC 


E1h RPDCGEN Rort Port Dynamic Clock Gating 00h R/W 
Enable 
® . 
E2-E3h IPWS Intel™ PRO/Wireless 3945ABG 0007h RO, R/W 
Status 
E8-EBh PECR1 PCI Express Configuration 00000020h R/W 
Register 1 


100-103h VCH Virtual Channel Capability Header 18010002h R/WO 
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Table 20-1. PCI Express* Configuration Registers Address Map 
(PCI Express—D28:F0/ F1/ F2/ F3/ F4/ F5) (Sheet 3 of 3) 


: Function 0-5 
Register Name Default 


110h-113h VOCAP a Henne a Reon 00000001h 
Capability 
114-117h VOCTL ee ais ep esoue 800000FFh R/W, RO 


144h-147h 


/W 
Uncorrectable Error Status R/WC, RO 
description 
/W 


150h-153h C 


VC 
PVS 
148h-14Bh Uncorrectable Error Mask 00000000h R/WO, RO 
14Ch- 14Fh Uncorrectable Error Severity 00060011h | = RO 
Correctable Error Status 00000000h R/WC 
154h-157h Correctable Error Mask 00000000h R/WO 
RES 
SD 
LD 


158h-15Bh Aecc | Aevanced Error Capabilities and! g9000000h | RO | 


180h-183h RCTCL ies Complex Topology Capability | ggg: 9005h 


description 
190h-193h Upstream Link Description 00000001h | RO | 


11A-11Bh VOSTS Virtual Channel 0 Resource Status 0000h 


198h-19Fh ULBA Upstream Link Base Address 
description 

300-303h PECR2 pet Expres Conngureuian 60005007h R 

Register 2 
318h PEETM PCI Express Extended Test Mode See bit 

Register description 

324h-327h PEC1 pee Exptes> Conilgurevian 00000000h_ | RO, R/W 
Register 1 
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viD—Vendor Identification Reg 


(PCI Express—D28:FO/ F1/ F2/ 


Address Offset: OOh-O1h 
Default Value: 8086h 


PCI Express* Configuration Registers 


ister 


F3/ F4/ F5) 
Attribute: RO 
Size: 16 bits 


a 





Vendor ID — RO. This is a 16-bit value assigned to Intel 


DI D—Device | dentification Register 


(PCI Express—D28:FO/ F1/ F2/ 


Address Offset: O2h-03h 

Default Value: Port 1= Bit Description 
Port 2= Bit Description 
Port 3= Bit Description 
Port 4= Bit Description 
Port 5= Bit Description 
Port 6= Bit Description 


F3/ F4/ F5) 
Attribute: RO 
Size: 16 bits 


a 


Device ID — RO. This is a 16-bit value assigned to the Intel® 1CH9 PCI Express 


controller. Refer to the Intel® 1/O Controller Hub (ICH9) Family Specification Update 
for the value of the Device |D Register 
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20.1.3 


PCI CMD—PCI Command Register 
(PCI Express—D28:F0/ F1/ F2/ F3/ F4/ F5) 


Address Offset: O4h-O05h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


ei ae 
15:11 | Reserved 


Interrupt Disable — R/W. This disables pin-based INTx# interrupts on enabled Hot- 
Plug and power management events. This bit has no effect on MSI operation. 


0 = Internal INTx# messages are generated if there is an interrupt for Hot-Plug or 
power management and MSI is not enabled. 
1 = Internal INTx# messages will not be generated. 


This bit does not affect interrupt forwarding from devices connected to the root port. 
Assert_INTx and Deassert_INTx messages will still be forwarded to the internal 
interrupt controllers if this bit is set. 


Fast Back to Back Enable (FBE) — Reserved per the PCI Express* Base Specification. 


SERR# Enable (SEE) — R/W. 

0 = Disable. 

1 = Enables the root port to generate an SERR# message when PSTS.SSE is set. 
Wait Cycle Control (WCC) — Reserved per the PCI Express Base Specification. 


Parity Error Response (PER) — R/W. 


0 = Disable. 
1 = Indicates that the device is capable of reporting parity errors as a master on the 
backbone: 


Postable Memory Write Enable (PMWE) — Reserved per the PCI Express* Base 
Specification. 


Special Cycle Enable (SCE) — Reserved per the PCI Express* Base Specification. 


Bus Master Enable (BME) — R/W. 

0 = Disable. All cycles from the device are master aborted 

1 = Enable. Allows the root port to forward cycles onto the backbone from a PCI 
Express* device. 


Memory Space Enable (MSE) — R/W. 

0 = Disable. Memory cycles within the range specified by the memory base and limit 
registers are master aborted on the backbone. 

1 = Enable. Allows memory cycles within the range specified by the memory base and 
limit registers can be forwarded to the PCI Express device. 


1/ O Space Enable (1OSE) — R/W. This bit controls access to the I/O space registers. 

0 = Disable. I/O cycles within the range specified by the 1/O base and limit registers 
are master aborted on the backbone. 

1 = Enable. Allows I/O cycles within the range specified by the I/O base and limit 
registers can be forwarded to the PCI Express device. 


VGA Palette Snoop (VPS) — Reserved per the PCI Express* Base Specification. 
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20.1.4 PCISTS—PCI Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: 0010h Size: 16 bits 


a 


Detected Parity Error (DPE) — R/WC. 


0 = No parity error detected. 
1 = Set when the root port receives a command or data from the backbone with a 
parity error. This is set even if PCIMD.PER (D28:FO/F1/F2/F3:04, bit 6) is not set. 


Signaled System Error (SSE) — R/WC. 

0 = No system error signaled. 

1 = Set when the root port signals a system error to the internal SERR# logic. 
Received Master Abort (RMA) — R/WC. 


0 = Root port has not received a completion with unsupported request status from the 
backbone. 

1 = Set when the root port receives a completion with unsupported request status from 
the backbone. 


Received Target Abort (RTA) — R/WC. 


0 = Root port has not received a completion with completer abort from the backbone. 
1 = Set when the root port receives a completion with completer abort from the 
backbone. 


Signaled Target Abort (STA) — R/WC. 


0 = No target abort received. 
1 = Set whenever the root port forwards a target abort received from the downstream 
device onto the backbone. 


DEVSEL# Timing Status (DEV_STS) — Reserved per the PCI Express* Base 
Specification. 


Master Data Parity Error Detected (DPED) — R/WC. 


0 = No data parity error received. 
1 = Set when the root port receives a completion with a data parity error on the 
backbone and PCIMD.PER (D28:FO0/F1/F2/F3:04, bit 6) is set. 


Fast Back to Back Capable (FB2BC) — Reserved per the PCI Express* Base 
Specification. 


10:9 


Reserved 


66 MHz Capable — Reserved per the PCI Express* Base Specification. 


Capabilities List — RO. Hardwired to 1. Indicates the presence of a capabilities list. 
Interrupt Status — RO. Indicates status of Hot-Plug and power management 
interrupts on the root port that result in INTx# message generation. 


0 = Interrupt is deasserted. 
1 = Interrupt is asserted. 


This bit is not set if MSI is enabled. If MSI is not enabled, this bit is set regardless of the 
state of PCICMD.Interrupt Disable bit (D28:FO/F1/F2/F3/F4/F5: 04h: bit 10). 
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20.1.5 RI D—Revision I dentification Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Offset Address: O8h Attribute: RO 
Default Value: See bit description Size: 8 bits 


Revision ID — RO. Refer to the Intel® I/O Controller Hub (1CH9) Family Specification 
Update for the value of the Revision ID Register 





20.1.6 PI —Programming Interface Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: O9h Attribute: RO 
Default Value: 00h Size: 8 bits 


Programming Interface — RO. 
00h = No specific register level programming interface defined. 





20.1.7 SCC—Sub Class Code Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: OAh Attribute: RO 
Default Value: 04h Size: 8 bits 


Sub Class Code (SCC) — RO. This field is determined by bit 2 of the MPC register 
(D28:FO-5: Offset D8h, bit 2). 


04h = PCI-to-PCI bridge. 
00h = Host Bridge. 





20.1.8 BCC—Base Class Code Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: OBh Attribute: RO 
Default Value: 06h Size: 8 bits 


Description 





7:0 Base Class Code (BCC) — RO. 
; 06h = Indicates the device is a bridge device. 
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CLS—Cache Line Size Register 
(PCI Express—D28:F0/ F1/ F2/ F3/ F4/ F5) 


Address Offset: OCh Attribute: R/W 
Default Value: 00h Size: 8 bits 


a 


Cache Line Size (CLS) — R/W. This is read/write but contains no functionality, per 
the PCI Express* Base Specification. 





PLT—Primary Latency Timer Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


SL 
Latency Count. Reserved per the PCI Express* Base Specification. 


HEADTYP—Header Type Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: OEh Attribute: RO 
Default Value: 81h Size: 8 bits 


a 


Multi-Function Device — RO. 
0 = Single-function device. 
1 = Multi-function device. 





Configuration Layout— RO. This field is determined by bit 2 of the MPC register 
(D28:FO-5: Offset D8h, bit 2). 


00h = Indicates a Host Bridge. 
01h = Indicates a PCI-to-PCl bridge: 





BNUM—Bus Number Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 18-1Ah Attribute: R/W 
Default Value: 000000h Size: 24 bits 


Subordinate Bus Number (SBBN) — R/W. Indicates the highest PCI bus number 
23:16 : 
below the bridge. 


Secondary Bus Number (SCBN) — R/W. Indicates the bus number the port. 
Primary Bus Number (PBN) — R/W. Indicates the bus number of the backbone. 
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20.1.14 


SLT—Secondary Latency Timer 
(PCI Express—D28:F0/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 1Bh Attribute: RO 
Default Value: 00h Size: 8 bits 


} Bit | Description 





7:0 Secondary Latency Timer — Reserved for a Root Port per the PCI Express* Base 
, Specification. 


!OBL—I/ O Base and Limit Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 1Ch-1Dh Attribute: R/W, RO 


Default Value: 0000h Size: 16 bits 


1/ O Limit Address (IOLA) — R/W. I/O Base bits corresponding to address lines 


15:12 for 4-KB alignment. Bits 11:0 are assumed to be padded to FFFh. 


1/ O Limit Address Capability (I OLC) — R/O. Indicates that the bridge does not 


support 32-bit 1/O addressing. 


1/ O Base Address (1 OBA) — R/W. I/O Base bits corresponding to address lines 


15:12 for 4-KB alignment. Bits 11:0 are assumed to be padded to 000h. 


1/ O Base Address Capability (1 OBC) — R/O. Indicates that the bridge does not 


support 32-bit 1/O addressing. 
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20.1.15 SSTS—Secondary Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 1Eh-1Fh Attribute: R/WC 
Default Value: 0000h Size: 16 bits 


a 


Detected Parity Error (DPE) — R/WC. 


0 = No error. 
1 = The port received a poisoned TLP- 


Received System Error (RSE) — R/WC. 
14 0 = No error. 
1 = The port received an ERR_FATAL or ERR_NONFATAL message from the device. 


Received Master Abort (RMA) — R/WC. 
13 0 = Unsupported Request not received. 


1 = The port received a completion with “Unsupported Request” status from the device. 


Received Target Abort (RTA) — R/WC. 
12 0 = Completion Abort not received. 
1 = The port received a completion with “Completion Abort” status from the device. 


Signaled Target Abort (STA) — R/WC. 
11 0 = Completion Abort not sent. 
1 = The port generated a completion with “Completion Abort” status to the device. 


Secondary DEVSEL# Timing Status (SDTS): Reserved per PCI Express* Base 
Specification. 


Data Parity Error Detected (DPD) — R/WC. 


0 = Conditions below did not occur: 
1 = Set when the BCTRL.PERE (D28:FO/F1/F2/F3/F4/F5:3E: bit 0) is set, and either of 


the following two conditions occurs: 
¢ Port receives completion marked poisoned. 
Port poisons a write request to the secondary side. 


10:9 


Secondary Fast Back to Back Capable (SFBC): Reserved per PCI Express* Base 
Specification. 


Reserved 


5 Secondary 66 MHz Capable (SC66): Reserved per PCI Express* Base Specification. 
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20.1.16 MBL—Memory Base and Limit Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 20h-23h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


Accesses that are within the ranges specified in this register will be sent to the attached 
device if CMD.MSE (D28:F0/F1/F2/F3/F4/F5:04: bit 1) is set. Accesses from the 
attached device that are outside the ranges specified will be forwarded to the backbone 
if CMD.BME (D28:FO/F1/F2/F3/F4/F5:04: bit 2) is set. The comparison performed is 
MB > AD[31:20] < ML. 


Peet 


Memory Limit (ML) — R/W. These bits are compared with bits 31:20 of the incoming 
address to determine the upper 1-MB aligned value of the range. 


Memory Base (MB) — R/W. These bits are compared with bits 31:20 of the incoming 
address to determine the lower 1-MB aligned value of the range. 


20.1.17 PMBL—Prefetchable Memory Base and Limit Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 24h-27h Attribute: R/W, RO 
Default Value: 00010001h Size: 32 bits 





Accesses that are within the ranges specified in this register will be sent to the device if 
CMD.MSE (D28:FO0/F1/F2/F3/F4/F5;04, bit 1) is set. Accesses from the device that are 
outside the ranges specified will be forwarded to the backbone if CMD.BME (D28:FO/F1/ 
F2/F3/F4/F5;04, bit 2) is set. The comparison performed is 

PMBU32:PMB > AD[63: 32]: AD[31:20] < PMLU32:PML. 


a 


Prefetchable Memory Limit (PML) — R/W. These bits are compared with bits 31:20 
of the incoming address to determine the upper 1-MB aligned value of the range. 


64-bit Indicator (164L) — RO. Indicates support for 64-bit addressing 


Prefetchable Memory Base (PMB) — R/W. These bits are compared with bits 31:20 
of the incoming address to determine the lower 1-MB aligned value of the range. 


3:0 64-bit Indicator (164B) — RO. Indicates support for 64-bit addressing 


20.1.18 PMBU32—Prefetchable Memory Base Upper 32 Bits 
Register (PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 28h-2Bh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 





Description 


31:0 Prefetchable Memory Base Upper Portion (PMBU) — R/W. Upper 32-bits of the 
, prefetchable address base. 
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20.1.19 PMLU32—Prefetchable Memory Limit Upper 32 Bits 
Register (PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 2Ch-2Fh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


Pe cine 


Prefetchable Memory Limit Upper Portion (PMLU) — R/W. Upper 32-bits of the 
prefetchable address limit. 





20.1.20 CAPP—Capabilities List Pointer Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 34h Attribute: RO 
Default Value: 40h Size: 8 bits 


Capabilities Pointer (PTR) — RO. Indicates that the pointer for the first entry in the 
capabilities list is at 40h in configuration space. 





20.1.21 INTR—Interrupt Information Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 3Ch-3Dh Attribute: R/W, RO 
Default Value: See bit description Size: 16 bits 
Function Level Reset: No (Bits 7:0 only) 


Interrupt Pin (IPIN) — RO. Indicates the interrupt pin driven by the root port. At 
reset, this register takes on the following values, which reflect the reset state of the 
D28IP register in chipset config space: 


Port Reset Value 
D28I1P.P1IP 
D281P.P21P 
D281P.P31P 
D281P.P4IP 
D281P.P51P 


NOTE: The value that is programmed into D28IP is always reflected in this register. 


Interrupt Line (ILINE) — R/W. Default = 00h. Software written value to indicate 
which interrupt line (vector) the interrupt is connected to. No hardware action is taken 
on this register. These bits are not reset by FLR. 
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20.1.22 BCTRL—Bridge Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 3Eh-3Fh Attribute: R/W 
Default Value: 0000h Size: 16 bits 


ee eee 


5:12 | Reserved 


Discard Timer SERR# Enable (DTSE): Reserved per PCI Express* Base Specification, 
Revision 1.0a 


Discard Timer Status (DTS): Reserved per PCI Express* Base Specification, Revision 
1.0a. 


Secondary Discard Timer (SDT): Reserved per PCI Express* Base Specification, 
Revision 1.0a. 


Primary Discard Timer (PDT): Reserved per PCI Express* Base Specification, Revision 
1.0a. 


Fast Back to Back Enable (FBE): Reserved per PCI Express* Base Specification, 
Revision 1.0a. 


Secondary Bus Reset (SBR) — R/W. Triggers a hot reset on the PCI Express* port. 


Master Abort Mode (MAM): Reserved per Express specification. 


VGA 16-Bit Decode (V16) — R/W. 


0 = VGA range is enabled. 
1 = The |/O aliases of the VGA range (see BCTRL: VE definition below), are not enabled, 
and only the base I/O ranges can be decoded 


1 = The following ranges will be claimed off the backbone by the root port: 
« Memory ranges A0OO0Oh-BFFFFh 
¢« I/O ranges 3BOh - 3BBh and 3COh - 3DFh, and all aliases of bits 15:10 in any combination of 1s 


ISA Enable (IE) — R/W. This bit only applies to |/O addresses that are enabled by the 

1/O Base and I/O Limit registers and are in the first 64 KB of PCI I/O space. 

0 = The root port will not block any forwarding from the backbone as described below. 

1 = The root port will block any forwarding from the backbone to the device of 1/O 
transactions addressing the last 768 bytes in each 1-KB block (offsets 100h to 
3FFh). 


SERR# Enable (SE) — R/W. 


0 = The messages described below are not forwarded to the backbone. 
1 = ERR_COR, ERR_NONFATAL, and ERR_FATAL messages received are forwarded to 
the backbone. 


Parity Error Response Enable (PERE) — R/W. When set, 

0 = Poisoned write TLPs and completions indicating poisoned TLPs will not set the 
SSTS.DPD (D28:FO/F1/F2/F3/F4/F5:1E, bit 8). 

1 = Poisoned write TLPs and completions indicating poisoned TLPs will set the 
SSTS.DPD (D28:FO/F1/F2/F3/F4/F5:1E, bit 8). 


11 
10 
7 
5 
3 
2 
1 





VGA Enable (VE) — R/W. 
0 = The ranges below will not be claimed off the backbone by the root port. 
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CLI ST—Capabilities List Register 
(PCI Express—D28:F0/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 40-41h Attribute: RO 
Default Value: 8010h Size: 16 bits 


a 


Next Capability (NEXT) — RO. Value of 80h indicates the location of the next pointer. 
Capability 1D (CID) — RO. Indicates this is a PCI Express* capability. 


XCAP—PCI Express* Capabilities Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 42h-43h Attribute: R/WO, RO 
Default Value: 0041h Size: 16 bits 


Pe cine 


Interrupt Message Number (IMN) — RO. The Intel® 1CH9 does not have multiple 
MSI interrupt numbers. 





slot. Slot support is platform specific. BIOS programs this field, and it is maintained 
until a platform reset. 


Device / Port Type (DT) — RO. Indicates this is a PCI Express* root port. 
Capability Version (CV) — RO. Indicates PCI Express 1.0. 


pe Slot Implemented (SI) — R/WO. Indicates whether the root port is connected to a 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


® 
PCI Express* Configuration Registers l n tel 


20.1.25 DCAP—Device Capabilities Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 44h-47h Attribute: RO 
Default Value: O0O008FCOh Size: 32 bits 


a eee 
31:28 | Reserved 


27:26 | Captured Slot Power Limit Scale (CSPS) — RO. Not supported. 
25:18 | Captured Slot Power Limit Value (CSPV) — RO. Not supported. 


17:16 | Reserved 


Role Based Error Reporting (RBER) — RO. Indicates that this device implements 
15 the functionality defined in the Error Reporting ECN as required by the PCI Express 1.1 


spec. 


Endpoint L1 Acceptable Latency (E1AL) — RO. This field is reserved with a setting of 
000b for devices other than Endpoints, per the PCI Express 1.1 Spec. 


Endpoint LOs Acceptable Latency (EOAL) — RO. This field is reserved with a setting of 
000b for devices other than Endpoints, per the PCI Express 1.1 Spec. 


Phantom Functions Supported (PFS) — RO. No phantom functions supported. 


Max Payload Size Supported (MPS) — RO. Indicates the maximum payload size 
supported is 128B. 





5 Extended Tag Field Supported (ETFS) — RO. Indicates that 8-bit tag fields are 
supported. 
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(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 48h-49h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


Max Read Request Size (MRRS) — RO. Hardwired to 0. 


Enable No Snoop (ENS) — RO. Not supported. The root port will never issue non-snoop 
requests. 


Aux Power PM Enable (APME) — R/W. The OS will set this bit to 1 if the device 
connected has detected aux power. It has no effect on the root port otherwise. 


Phantom Functions Enable (PFE) — RO. Not supported. 
Extended Tag Field Enable (ETFE) — RO. Not supported. 


Max Payload Size (MPS) — R/W. The root port only supports 128-B payloads, 
regardless of the programming of this field. 


Enable Relaxed Ordering (ERO) — RO. Not supported. 


Unsupported Request Reporting Enable (URE) — R/W. 

0 = The root port will ignore unsupported request errors. 

1 = Allows signaling ERR_NONFATAL, ERR_FATAL, or ERR_COR to the Root Control 
register when detecting an unmasked Unsupported Request (UR). An ERR_COR is 


signaled when a unmasked Advisory Non- Fatal UR is received. An ERR_FATAL, 
ERR_or NONFATAL, is sent to the Root Control Register when an uncorrectable non- 
Advisory UR is received with the severity set by the Uncorrectable Error Severity 
register. 


Fatal Error Reporting Enable (FEE) — R/W. 

0 = The root port will ignore fatal errors. 

1 = Enables signaling of ERR_FATAL to the Root Control register due to internally 
detected errors or error messages received across the link. Other bits also control 
the full scope of related error reporting. 


Non-Fatal Error Reporting Enable (NFE) — R/W. 

0 = The root port will ignore non-fatal errors. 

1 = Enables signaling of ERR_NONFATAL to the Root Control register due to internally 
detected errors or error messages received across the link. Other bits also control 
the full scope of related error reporting. 


Correctable Error Reporting Enable (CEE) — R/W. 


0 = The root port will ignore correctable errors. 

1 = Enables signaling of ERR_CORR to the Root Control register due to internally 
detected errors or error messages received across the link. Other bits also control 
the full scope of related error reporting. 
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20.1.27 DSTS—Device Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 4Ah-4Bh Attribute: R/WC, RO 
Default Value: 0010h Size: 16 bits 


C2 rr ee 


15:6 | Reserved 


Transactions Pending (TDP) — RO. This bit has no meaning for the root port since 
only one transaction may be pending to the Intel® 1CH9, so a read of this bit cannot 
occur until it has already returned to 0. 


AUX Power Detected (APD) — RO. The root port contains AUX power for wakeup. 


Unsupported Request Detected (URD) — R/WC. Indicates an unsupported request 
was detected. 


Fatal Error Detected (FED) — R/WC. Indicates a fatal error was detected. 
0 = Fatal has not occurred. 


1 = A fatal error occurred from a data link protocol error, link training error, buffer 
overflow, or malformed TLP. 


Non-Fatal Error Detected (NFED) — R/WC. Indicates a non-fatal error was detected. 

0 = Non-fatal has not occurred. 

1 = A non-fatal error occurred from a poisoned TLP, unexpected completions, 
unsupported requests, completer abort, or completer timeout. 


Correctable Error Detected (CED) — R/WC. Indicates a correctable error was 

detected. 

0 = Correctable has not occurred. 

1 = The port received an internal correctable error from receiver errors / framing 
errors, TLP CRC error, DLLP CRC error, replay num rollover, replay timeout. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 785 


| | ® 
| Nn tel PCI Express* Configuration Registers 


20.1.28 LCAP—Link Capabilities Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 4Ch-4Fh Attribute: R/WO, RO 
Default Value: See bit description Size: 32 bits 


a 


Port Number (PN) — RO. Indicates the port number for the root port. This value is 
different for each implemented port: 


Function Port # Value of PN Field 
D28:FO 1 Olh 
D28:F1 02h 
D28:F2 03h 
D28:F3 04h 
D28:F4 05h 
D28:F5 06h 


Link Active Reporting Capable (LARC) — RO. Hardwired to 1 to indicate that this 
20 port supports the optional capability of reporting the DL_Active state of the Data Link 


Control and Management State Machine. 


17:15 | L1 Exit Latency (EL1) — RO. Set to 010b to indicate an exit latency of 2 us to 4 us. 


LOs Exit Latency (ELO) — RO. Indicates as exit latency based upon common-clock 
configuration. 
LCLT.CCC Value of ELO (these bits) 
14:12 
0 MPC.UCEL (D28:FO/F1/F2/F3:D8h: bits20: 18) 
1 MPC.CCEL (D28:FO/F1/F2/F3:D8h: bits17: 15) 


NOTE: LCLT.CCC is at D28:FO/F1/F2/F3/F4/F5: 50h: bit 6 


Active State Link PM Support (APMS) — R/WO. Indicates what level of active state 
link power management is supported on the root port. 
Bits Definition 
11:10 00b Neither LOs nor L1 are supported 
01b LOs Entry Supported 
10b L1 Entry Supported 
11b Both LOs and L1 Entry Supported 


786 Intel® 1/0 Controller Hub 9 (ICH9) Family Datasheet 





® 
PCI Express* Configuration Registers [ n tel 


Maximum Link Width (MLW) — RO. For the root ports, several values can be taken, 
based upon the value of the chipset config register field RPC.PC1 (Chipset Config 
Registers: Offset 0224h: bits1:0) for Ports 1-4 and RPC.PC2 (Chipset Config 

Registers: Offset 0224h: bits1:0) for Ports 5 and 6 


Value of MLW Field 
Port # RPC.PC1=00b RPC.PC1=11b 
O1h 04h 
Olh Olh 
O1h O1h 
O1h O1h 
Port # RPC.PC2=00b RPC.PC2=11b 
5 O1h N/A 


3:0 Maximum Link Speed (MLS) — RO. Set to 1h to indicate the link speed is 2.5 Gb/s. 
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20.1.29 LCTL—Link Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 50h-51h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


Extended Synch (ES) — R/W. 


0 = Extended synch disabled. 
1 = Forces extended transmission of FTS ordered sets in FTS and extra TS2 at exit from 
L1 prior to entering LO. 


Common Clock Configuration (CCC) — R/W. 

0 = The ICH9 and device are not using a common reference clock. 

1 = The ICH9 and device are operating with a distributed common reference clock. 
Retrain Link (RL) — R/W. 


0 = This bit always returns 0 when read. 

1 = The root port will train its downstream link. 

NOTE: Software uses LSTS.LT (D28:FO/F1/F2/F3/F4/F5:52, bit 11) to check the status 
of training. 


1 = The root port will disable the link. 


Read Completion Boundary Control (RCBC) — RO. Indicates the read completion 
boundary is 64 bytes. 


Reserved 


Active State Link PM Control (APMC) — R/W. Indicates whether the root port should 
enter LOs or L1 or both. 


Bits Definition 

00b Disabled 

01b LOs Entry is Enabled 

10b L1 Entry is Enabled 

11b LOs and L1 Entry Enabled 





Link Disable (LD) — R/W. 
0 = Link enabled. 
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20.1.30 LSTS—Link Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 52h-53h Attribute: RO 
Default Value: See bit description Size: 16 bits 


ee 
15:14 | Reserved 
Data Link Layer Active (DLLA) — RO. Default value is Ob. 
13 0 = Data Link Control and Management State Machine is not in the DL_Active state 


1 = Data Link Control and Management State Machine is in the DL_Active state 


Slot Clock Configuration (SCC) — RO. Set to 1b to indicate that the Intel® 1CH9 uses 
12 ; 
the same reference clock as on the platform and does not generate its own clock. 


Link Training (LT) — RO. Default value is Ob. 
11 0 = Link training completed. 
1 = Link training is occurring. 


Link Training Error (LTE) — RO. Not supported. Set value is Ob. 


Negotiated Link Width (NLW) — RO. This field indicates the negotiated width of the 
given PCI Express* link. The contents of this NLW field is undefined if the link has not 
successfully trained. 


Possible Values 

000001b, 000010b, 000100b 
000001b 

000001b 

000001b 

000001b, 000010b 

000001b 


NOTE: 000001b = x1 link width, 000010b =x2 linkwidth, 000100b = x4 linkwidth 


Link Speed (LS) — RO. This field indicates the negotiated Link speed of the given PCI 
Express* link. 


O1h = Link is 2.5 Gb/s. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 789 


® 
tel PCI Express* Configuration Registers 


20.1.31 SLCAP—Slot Capabilities Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 54h-57h Attribute: R/WO, RO 
Default Value: 00000060h Size: 32 bits 


31:19 Physical Slot Number (PSN) — R/WO. This is a value that is unique to the slot 
number. BIOS sets this field and it remains set until a platform reset. 


16:15 Slot Power Limit Scale (SLS) — R/WO. Specifies the scale used for the slot power 
limit value. BIOS sets this field and it remains set until a platform reset. 


Slot Power Limit Value (SLV) — R/WO. Specifies the upper limit (in conjunction with 
SLS value), on the upper limit on power supplied by the slot. The two values together 
indicate the amount of power in watts allowed for the slot. BIOS sets this field and it 
remains set until a platform reset. 


Hot Plug Capable (HPC) — RO. 

1b = Indicates that Hot-Plug is supported. 

Hot Plug Surprise (HPS) — RO. 

1b = Indicates the device may be removed from the slot without prior notification. 


Attention Indicator Present (AIP) — RO. 
Ob = Indicates that an attention indicator LED is not present for this slot. 


MRL Sensor Present (MSP) — RO. 
Ob = Indicates that an MRL sensor is not present. 
Power Controller Present (PCP) — RO. 
Ob = Indicates that a power controller is not implemented for this slot. 
Attention Button Present (ABP) — RO. 
Ob = Indicates that an attention button is not implemented for this slot. 





Power I ndicator Present (PIP) — RO. 
Ob = Indicates that a power indicator LED is not present for this slot. 
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20.1.32 SLCTL—Slot Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 58h-59h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


2 eee 
15:13 | Reserved 
12 
11 
10 
7:6 
5 
3 


Link Active Changed Enable (LACE) — R/W. When set, this field enables generation 
of a hot plug interrupt when the Data Link Layer Link Active field (D28:FO/F1/F2/F3/F4/ 
F5:52h:bit 13) is changed. 


Reserved 


Power Controller Control (PCC) — RO.This bit has no meaning for module based 
Hot-Plug. 


Power I ndicator Control (PIC) — R/W. When read, the current state of the power 
indicator is returned. When written, the appropriate POWER_INDICATOR_* messages 
are sent. Defined encodings are: 


Bits Definition 
00b Reserved 
O1b On 

10b Blink 

11b Off 


attention indicator is returned. When written, the appropriate 
ATTENTION_INDICATOR_* messages are sent. Defined encodings are: 


Bits Definition 
00b Reserved 
O1b On 

10b Blink 

11b Off 


Hot Plug Interrupt Enable (HPE) — R/W. 


0 = Hot plug interrupts based on Hot-Plug events is disabled. 
1 = Enables generation of a Hot-Plug interrupt on enabled Hot-Plug events. 


Command Completed Interrupt Enable (CCE) — R/W. 

0 = Hot plug interrupts based on command completions is disabled. 

1 = Enables the generation of a Hot-Plug interrupt when a command is completed by 
the Hot-Plug controller. 


; Attention Indicator Control (AIC) — R/W. When read, the current state of the 


1 = Enables the generation of a Hot-Plug interrupt or wake message when the presence 
detect logic changes state. 





Presence Detect Changed Enable (PDE) — R/W. 
0 = Hot plug interrupts based on presence detect logic changes is disabled. 
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MRL Sensor Changed Enable (MSE) — Reserved. MSE not supported. 


Power Fault Detected Enable (PFE) — Reserved. PFE not supported. 


of a Hot-Plug interrupt when the attention button is pressed. 


0 = Hot plug interrupts based on the attention button being pressed is disabled. 
1 = Enables the generation of a Hot-Plug interrupt when the attention button is 
pressed. 


7 Attention Button Pressed Enable (ABE) — R/W. When set, enables the generation 





20.1.33 SLSTS—Slot Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 5Ah-5Bh Attribute: R/WC, RO 
Default Value: 0000h Size: 16 bits 


Link Active State Changed (LASC) — R/WC. 


1 = This bit is set when the value reported in Data Link Layer Link Active field of the 
Link Status register (D28:FO/F1/F2/F3/F4/F5:52h: bit 13) is changed. In response 
to a Data Link Layer State Changed event, software must read Data Link Layer Link 
Active field of the Link Status register to determine if the link is active before 
initiating configuration cycles to the hot plugged device. 


pee 
Presence Detect State (PDS) — RO. If XCAP.SI (D28:FO/F1/F2/F3/F4/F5: 42h: bit 8) 
is set (indicating that this root port spawns a slot), then this bit: 
0 = Indicates the slot is empty. 
1 = Indicates the slot has a device connected. 
Otherwise, if XCAP.SI is cleared, this bit is always set (1). 
| 2 
a 


MRL Sensor State (MS) — Reserved as the MRL sensor is not implemented. 


Command Completed (CC) — R/WC. 


0 = Issued command not completed. 

1 = The Hot-Plug controller completed an issued command. This is set when the last 
message of a command is sent and indicates that software can write a new 
command to the slot controller. 


Presence Detect Changed (PDC) — R/WC. 


0 = No change in the PDS bit. 
1 = The PDS bit changed states. 


MRL Sensor Changed (MSC) — Reserved as the MRL sensor is not implemented. 
Power Fault Detected (PFD) — Reserved as a power controller is not implemented. 
Attention Button Pressed (ABP) — R/WC. 


0 = The attention button has not been pressed. 
1 = The attention button is pressed. 
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20.1.34 RCTL—Root Control Register 


20.1.35 


(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 5Ch-5Dh Attribute: R/W 
Default Value: 0000h Size: 16 bits 


rr ee 


15:4 | Reserved 


PME Interrupt Enable (PIE) — R/W. 

0 = Interrupt generation disabled. 

1 = Interrupt generation enabled when PCISTS.Inerrupt Status (D28:FO/F1/F2/F3/F4/ 
F5: 60h, bit 16) is in a set state (either due to a 0 to 1 transition, or due to this bit 
being set with RSTS.IS already set). 


System Error on Fatal Error Enable (SFE) — R/W. 


0 = An SERR# will not be generated. 
1 = An SERR# will be generated, assuming CMD.SEE (D28:FO/F1/F2/F3/F4/F5:04, 
bit 8) is set, if a fatal error is reported by any of the devices in the hierarchy of this 


root port, including fatal errors in this root port. 


System Error on Non-Fatal Error Enable (SNE) — R/W. 

0 = An SERR# will not be generated. 

1 = An SERR# will be generated, assuming CMD.SEE (D28:FO/F1/F2/F3/F4/F5:04, 
bit 8) is set, if a non-fatal error is reported by any of the devices in the hierarchy of 
this root port, including non-fatal errors in this root port. 


System Error on Correctable Error Enable (SCE) — R/W. 

0 = An SERR# will not be generated. 

1 = An SERR# will be generated, assuming CMD.SEE (D28:FO/F1/F2/F3/F4/F5:04, 
bit 8) if a correctable error is reported by any of the devices in the hierarchy of this 
root port, including correctable errors in this root port. 





RSTS—Root Status Register 
(PCI Express—D28:F0O/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 60h-63h Attribute: R/WC, RO 
Default Value: 00000000h Size: 32 bits 


2 en 


PME Pending (PP) — RO. 

0 = When the original PME is cleared by software, it will be set again, the requestor ID 
will be updated, and this bit will be cleared. 

1 = Indicates another PME is pending when the PME status bit is set. 


PME Status (PS) — R/WC. 


0 = PME was not asserted. 
1 = Indicates that PME was asserted by the requestor ID in RID. Subsequent PMEs are 
kept pending until this bit is cleared. 


PME Requestor ID (RID) — RO. Indicates the PCI requestor ID of the last PME 
15:0 ; : 
requestor. Valid only when PS is set. 
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20.1.36 


20.1.37 


20.1.38 
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MI D—Message Signaled I nterrupt I dentifiers Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 80h-81h Attribute: RO 
Default Value: 9005h Size: 16 bits 


a 


Next Pointer (NEXT) — RO. Indicates the location of the next pointer in the list. 


Capability 1D (CID) — RO. Capabilities 1D indicates MSI. 





MC—Message Signaled I nterrupt Message Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 82-83h Attribute: R/W, RO 
Default Value: 0000h Size: 16 bits 


compatibility, but only one message is ever sent by the root port. 


MSI Enable (MSIE) — R/W. 


0 = MSI is disabled. 
1 = MSI is enabled and traditional interrupt pins are not used to generate interrupts. 


NOTE: CMD.BME (D28: FO/F1/F2/F3/F4/F5:04h: bit 2) must be set for an MSI to be 
generated. If CMD.BME is cleared, and this bit is set, no interrupts (not even pin 
based) are generated. 





MA—Message Signaled Interrupt Message Address 
Register (PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 84h-87h Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 


3 Address (ADDR) — R/W. Lower 32 bits of the system specified message address, 
always DW aligned. 


1:2 
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20.1.39 MD—Message Signaled I nterrupt Message Data Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 88h-89h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


C2 rr ae 


Data (DATA) — R/W. This 16-bit field is programmed by system software if MSI is 


enabled. Its content is driven onto the lower word (PCI AD[15:0]) during the data 
phase of the MSI memory write transaction. 





20.1.40 SVCAP—Subsystem Vendor Capability Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 90h-91h Attribute: RO 
Default Value: AOODh Size: 16 bits 


Ere eee 


Next Capability (NEXT) — RO. Indicates the location of the next pointer in the list. 


Capability Identifier (CID) — RO. Value of ODh indicates this is a PCI bridge 
subsystem vendor capability. 





20.1.41 SVID—Subsystem Vendor Identification Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 94h-97h Attribute: R/WO 
Default Value: | 00000000h Size: 32 bits 


Subsystem Identifier (SID) — R/WO. Indicates the subsystem as identified by the 
vendor. This field is write once and is locked down until a bridge reset occurs (not the 
PCI bus reset). 


Subsystem Vendor Identifier (SVID) — R/WO. Indicates the manufacturer of the 
subsystem. This field is write once and is locked down until a bridge reset occurs (not 
the PCI bus reset). 





20.1.42 PMCAP—Power Management Capability Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: AOh-Alh Attribute: RO 
Default Value: 0001h Size: 16 bits 


Capability Identifier (CID) — RO. Value of 01h indicates this is a PCI power 
management capability. 
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20.1.43 PMC—PCI Power Management Capabilities Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: A2h-A3h Attribute: RO 
Default Value: C802h Size: 16 bits 


Pe cine 


PME_ Support (PMES) — RO. Indicates PME# is supported for states DO, D3yo7 and 
D3co_p- The root port does not generate PME#, but reporting that it does is necessary 
for some legacy operating systems to enable PME# in devices connected behind this 
root port. 


D2_Support (D2S) — RO. The D2 state is not supported. 
D1_Support (D1S) — RO The D1 state is not supported. 


Aux_ Current (AC) — RO. Reports 375 mA maximum suspend well current required 
when in the D3coLp state. 


Device Specific | nitialization (DSI) — RO. 


1 = Indicates that no device-specific initialization is required. 


Reserved 


PME Clock (PMEC) — RO. 


1 = Indicates that PCI clock is not required to generate PME#. 


2:0 Version (VS) — RO. Indicates support for Revision 1.1 of the PC] Power Management 
, Specification. 
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20.1.44 PMCS—PCI Power Management Control and Status 
Register (PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: A4h-A7h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


2 eee 
31:24 | Reserved 


23 Bus Power / Clock Control Enable (BPCE) — Reserved per PCI Express* Base 
Specification, Revision 1.0a. 
B2/B3 Support (B23S) — Reserved per PCI Express* Base Specification, Revision 1.0a. 


21:16 | Reserved 


PME Status (PMES) — RO. 


1 = Indicates a PME was received on the downstream link. 


Reserved 


Reserved 


Power State (PS) — R/W. This field is used both to determine the current power state 
of the root port and to set a new power state. The values are: 


00 = DO state 
11 = D3yHot state 


NOTE: When in the D3yo7 state, the controller’s configuration space is available, but 
the 1/O and memory Spaces are not. Type 1 configuration cycles are also not 
accepted. Interrupts are not required to be blocked as software will disable 
interrupts prior to placing the port into D3yo7. If software attempts to write a 
‘10’ or ‘01’ to these bits, the write will be ignored. 





PME Enable (PMEE) — R/W. 

1 = Indicates PME is enabled. The root port takes no action on this bit, but it must be 
R/W for some legacy operating systems to enable PME# on devices connected to 
this root port. 

This bit is sticky and resides in the resume well. The reset for this bit is RSMRST# which 

is not asserted during a warm reset. 
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20.1.45 MPC2—Miscellaneous Port Configuration Register 2 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: D4h-D7h Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


rr 


EOI Forwarding Disable (EOIFD) — R/W. When set, EOI messages are not claimed 
on the backbone by this port an will not be forwarded across the PCle link. 


0 = EOI forwarding is disabled. 


1 = EOI forwarding is enabled. 


L1 Completion Timeout Mode (LICTM) — R/W. 

0 = PCI Express Specification Compliant. Completion timeout is disabled during 
software initiated L1, and enabled during ASPM initiate L1. 

1 = Completion timeout is enabled during L1, regardless of how L1 entry was initiated. 





20.1.46 MPC—Miscellaneous Port Configuration Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: D8h-DBh Attribute: R/W, RO 
Default Value: 08110000h Size: 32 bits 


Power Management SCI Enable (PMCE) — R/W. 


0 = SCI generation based on a power management event is disabled. 
1 = Enables the root port to generate SCI whenever a power management event is 
detected. 


Hot Plug SCI Enable (HPCE) — R/W. 
0 = SCI generation based on a Hot-Plug event is disabled. 
1 = Enables the root port to generate SCI whenever a Hot-Plug event is detected. 


Link Hold Off (LHO) — R/W. 


1 = Port will not take any TLP. This is used during loopback mode to fill up the 
downstream queue. 


Address Translator Enable (ATE) — R/W. This bit is used to enable address 
translation via the AT bits in this register during loopback mode. 

0 = Disable 

1 = Enable 


Lane Reversal (LR) — R/O. This register reads the setting of the SATALED# strap. 


0 = PCI Express Lanes 0-3 are reversed. 
1 = No Lane reversal (default). 


NOTE: The port configuration straps must be set such that Port 1 is configured as a x4 
port using lanes 0-3 when Lane Reversal is enabled. x2 lane reversal is not 
supported. 

NOTE: This register is only valid on port 1. 
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Invalid Receive Bus Number Check Enable (I RBNCE) — R/W. When set, the 
receive transaction layer will signal an error if the bus number of a Memory request 
does not fall within the range between SCBN and SBBN. If this check is enabled and the 
request is a memory write, it is treated as an Unsupported Request. If this check is 
enabled and the request is a non-posted memory read request, the request is 
considered a Malformed TLP and a fatal error. 


Messages, I/O, Config, and Completions are never checked for valid bus number. 
Invalid Receive Range Check Enable (IRRCE) — R/W. When set, the receive 
transaction layer will treat the TLP as an Unsupported Request error if the address 


range of a Memory request does not outside the range between prefetchable and non- 
prefetchable base and limit. 

Messages, I/O, Configuration, and Completions are never checked for valid address 
ranges. 


BME Receive Check Enable (BMERCE) — R/W. When set, the receive transaction 
layer will treat the TLP as an Unsupported Request error if a memory read or write 
request is received and the Bus Master Enable bit is not set. 


Messages, 10, Config, and Completions are never checked for BME. 


0 = Normal operation. Detected output from AFE is sampled for presence detection. 

1 = Override mode. Ignores AFE detect output and link training proceeds as if a device 
were detected. 

Flow Control During L1 Entry (FCDL1E) — R/W. 


0 = No flow control update DLLPs sent during L1 Ack transmission. 
1 = Flow control update DLLPs sent during L1 Ack transmission as required to meet the 
30 us periodic flow control update. 


Unique Clock Exit Latency (UCEL) — R/W. This value represents the LOs Exit 
Latency for unique-clock configurations (LCTL.CCC = 0) (D28:FO/F1/F2/F3/F4/ 

F5: Offset 50h: bit 6). It defaults to 512 ns to less than 1 us, but may be overridden by 
BIOS. 


Common Clock Exit Latency (CCEL) — R/W. This value represents the LOs Exit 
Latency for common-clock configurations (LCTL.CCC = 1) (D28:FO/F1/F2/F3/F4/ 

F5: Offset 50h: bit 6). It defaults to 128 ns to less than 256 ns, but may be overridden 
by BIOS. 


Port I/ OxApic Enable (PAE) — R/W. 


0 = Hole is disabled. 
1 =A range is opened through the bridge for the following memory addresses: 


Port # Address 
1 FEC1_0000h - FEC1_7FFFh 
2 FEC1_8000h - FEC1_FFFFh 
3 FEC2_0000h - FEC2_7FFFh 
4 FEC2_8000h - FEC2_FFFFh 
5 FEC3_0000h - FEC3_7FFFh 
6 FEC3_8000h - FEC3_FFFFh 
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Bridge Type (BT) — RO. This register can be used to modify the Base Class and 

Header Type fields from the default P2P bridge to a Host Bridge. Having the root port 

appear as a Host Bridge is useful in some server configurations. 

0 = The root port bridge type is a P2P Bridge, Header Sub-Class = 04h, and Header 
Type = Type 1. 

1 = The root port bridge type is a P2P Bridge, Header Sub-Class = 00h, and Header 
Type = Type 0. 


Hot Plug SMI Enable (HPME) — R/W. 


0 = SMI generation based on a Hot-Plug event is disabled. 
1 = Enables the root port to generate SMI whenever a Hot-Plug event is detected. 


Power Management SMI Enable (PMME) — R/W. 

0 = SMI generation based on a power management event is disabled. 

1 = Enables the root port to generate SMI whenever a power management event is 
detected. 
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20.1.47 SMSCS—SMI/ SCI Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: DCh-DFh Attribute: R/WC 
Default Value: 00000000h Size: 32 bits 


Power Management SCI Status (PMCS) — R/WC. 

1 = PME control logic needs to generate an interrupt, and this interrupt has been 
routed to generate an SCI. 

Hot Plug SCI Status (HPCS) — R/WC. 


1 = Hot-Plug controller needs to generate an interrupt, and has this interrupt been 
routed to generate an SCI. 


1 = SLSTS.LASC (D28: FO/F1/F2/F3/F4/F5:5A, bit 8) transitioned from 0-to-1, and 
MPC.HPME (D28:F0/F1/F2/F3/F4/F5:D8, bit 1) is set. When this bit is set, an SMI# 
will be generated. 


Hot Plug Command Completed SMI Status (HPCCM) — R/WC. 


1 = SLSTS.CC (D28:FO/F1/F2/F3/F4/F5:5A, bit 4) transitioned from O-to-1, and 
MPC.HPME (D28:FO/F1/F2/F3/F4/F5:D8, bit 1) is set. When this bit is set, an SMI # 
will be generated. 


Hot Plug Attention Button SMI Status (HPABM) — R/WC. 
1 = SLSTS.ABP (D28:FO/F1/F2/F3/F4/F5:5A, bit 0) transitioned from O-to-1, and 


MPC.HPME (D28:FO/F1/F2/F3/F4/F5:D8, bit 1) is set. When this bit is set, an SMI# 
will be generated. 


Hot Plug Presence Detect SMI Status (HPPDM) — R/WC. 
1 = SLSTS.PDC (D28:FO/F1/F2/F3/F4/F5:5A, bit 3) transitioned from O-to-1, and 


MPC.HPME (D28:FO/F1/F2/F3/F4/F5:D8, bit 1) is set. When this bit is set, an SMI# 
will be generated. 


Power Management SMI Status (PMMS) — R/WC. 


1 = RSTS.PS (D28:FO/F1/F2/F3/F4/F5:60, bit 16) transitioned from O-to-1, and 
MPC.PMME (D28:FO/F1/F2/F3/F4/F5:D8, bit 1) is set. 
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20.1.48 RPDCGEN—Root Port Dynamic Clock Gating Enable 
(PCI Express-D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: Elh Attribute: R/W 
Default Value: 00h Size: 8-bits 


Reserved. RO 


Shared Resource Dynamic Link Clock Gating Enable (SRDLCGEN) — RW. 


0 = Disables dynamic clock gating of the shared resource link clock domain. 
1 = Enables dynamic clock gating on the root port shared resource link clock domain. 


Only the value from Port 1 is used for ports 1-4. Only the value from Port 5 is used for 
ports 5-6. 


Shared Resource Dynamic Backbone Clock Gate Enable (SRDBCGEN) — RW. 
2 


0 = Disables dynamic clock gating of the shared resource backbone clock domain. 
1 = Enables dynamic clock gating on the root port shared resource backbone clock 
domain. 


Only the value from Port 1 is used for ports 1-4. Only the value from Port 5 is used for 
ports 5-6. 

Root Port Dynamic Link Clock Gate Enable (RPDLCGEN) — RW. 

0 = Disables dynamic clock gating of the root port link clock domain. 

1 = Enables dynamic clock gating on the root port link clock domain. 

Root Port Dynamic Backbone Clock Gate Enable (RPDBCGEN) — RW. 


0 = Disables dynamic clock gating of the root port backbone clock domain. 
1 = Enables dynamic clock gating on the root port backbone clock domain. 





20.1.49 IPWS—Intel® PRO/ Wireless 3945ABG Status 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: E2h-E3h Attribute: RO, R/W 
Default Value: 0007h Size: 16 bits 


Lo 


Intel PRO/ Wireless 3945ABG Status (I PWSTAT) — RO. 


1 = Link has trained to LO in Intel PRO/Wireless 3945ABG mode. 


IPWS Field 1 — R/W. BIOS must program this bit to 1b. 
a 
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20.1.50 PECR1—PCI Express* Configuration Register 1 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: E8h-EBh Attribute: R/W 
Default Value: | 00000020h Size: 32 bits 


oe 
Reserved 


PECR1 Field 2 — R/W. BIOS may set this bit to 1. 





20.1.51 VCH—Virtual Channel Capability Header Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 100h-103h Attribute: RWO 
Default Value: 18010002h Size: 32 bits 


Next Capability Offset (NCO) — R/WO. Indicates the next item in the list. 
000h = Does not support Root Complex Topology Capability Structure. 
180h = Supports Root Complex Topology Capability Structure. 
Capability Version (CV) — R/WO. Indicates the version of the capability structure by 
the PCI SIG. 
Oh = Does not support PCI Express virtual Channel capability and the Root complex 
topology Capability Structure. 
1h = Supports PCI Express virtual Channel capability and the Root complex topology 
Capability Structure. 
Capability 1D (CID) — R/WO. Indicates this is the Virtual Channel capability item. 
0000h = Does not support PCI Express virtual Channel capability and the Root 
complex topology Capability Structure. 
0002h = Supports PCI Express virtual Channel capability and the Root complex 
topology Capability Structure. 





20.1.52 VCAP2—Virtual Channel Capability 2 Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 108h-10Bh Attribute: RO 
Default Value: | 00000001h Size: 32 bits 


Fo re. ae 


VC Arbitration Table Offset (ATO) — RO. Indicates that no table is present for VC 


arbitration since it is fixed. 
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20.1.53 PVC—Port Virtual Channel Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 10Ch-10Dh Attribute: R/W 
Default Value: 0000h Size: 16 bits 


ae VC Arbitration Select (AS) — R/W. Indicates which VC should be programmed in the 
3:1 


VC arbitration table. The root port takes no action on the setting of this field since there 
is no arbitration table. 


Load VC Arbitration Table (LAT) — R/W. Indicates that the table programmed 
should be loaded into the VC arbitration table. This bit always returns 0 when read. 





20.1.54 PVS—Port Virtual Channel Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 10Eh-10Fh Attribute: RO 
Default Value: 0000h Size: 16 bits 


2 ee 


VC Arbitration Table Status (VAS) — RO. Indicates the coherency status of the VC 
Arbitration table when it is being updated. This field is always 0 in the root port since 
there is no VC arbitration table. 





20.1.55 VOCAP—Virtual Channel 0 Resource Capability Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 110h-113h Attribute: RO 
Default Value: | 00000001h Size: 32 bits 


a 


Port Arbitration Table Offset (AT) — RO. This VC implements no port arbitration 
31:24 , ; Se ee 
table since the arbitration is fixed. 


; Maximum Time Slots (MTS) — RO. This VC implements fixed arbitration; therefore, 
22:16 eee : 
this field is not used. 


5 Reject Snoop Transactions (RTS) — RO. This VC must be able to take snoopable 
transactions. 


Advanced Packet Switching (APS) — RO. This VC is capable of all transactions, not 
just advanced packet switching transactions. 


Port Arbitration Capability (PAC) — RO. Indicates that this VC uses fixed port 
arbitration. 
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20.1.56 


20.1.57 





VOCTL—Virtual Channel 0 Resource Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 114h-117h Attribute: R/W, RO 
Default Value: 800000FFh Size: 32 bits 


rr ee 
Virtual Channel Enable (EN) — RO. Always set to 1. Virtual Channel 0 cannot be 
disabled. 


30:27 | Reserved. 
26:24 Virtual Channel Identifier (VCID) — RO. Indicates the ID to use for this virtual 
; channel. 

23:20 | Reserved. 
Port Arbitration Select (PAS) — R/W. Indicates which port table is being 

19:17 | programmed. The root complex takes no action on this setting since the arbitration is 
fixed and there is no arbitration table. 
Load Port Arbitration Table (LAT) — RO. The root port does not implement an 
arbitration table for this virtual channel. 


Reserved. 


Transaction Class / Virtual Channel Map (TVM) — R/W. Indicates which 
transaction classes are mapped to this virtual channel. When a bit is set, this 
transaction class is mapped to the virtual channel. 

Bit Transaction Class 

Transaction Class 7 

Transaction Class 6 

nl Transaction Class 5 

Transaction Class 4 

Transaction Class 3 

Pea 


Transaction Class 2 


Transaction Class 1 


Reserved. Transaction class 0 must always mapped to VCO. 


vosTS—Virtual Channel O Resource Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 11Ah-11Bh Attribute: RO 
Default Value: 0000h Size: 16 bits 


VC Negotiation Pending (NP) — RO. 
1 0 = Negotiation is not pending. 


1 = Indicates the Virtual Channel is still being negotiated with ingress ports. 


Port Arbitration Tables Status (ATS). There is no port arbitration table for this VC, 
so this bit is reserved as 0. 
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(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 144h-147h Attribute: R/WC, RO 
Default Value: 00000000000x0xxx0x0x0000000x0000b Size: 32 bits 


This register maintains its state through a platform reset. It loses its state upon 
suspend. 


El re... <r 


Unsupported Request Error Status (URE) — R/WC. Indicates an unsupported 
request was received. 


19 ECRC Error Status (EE) — RO. ECRC is not supported. 


Malformed TLP Status (MT) — R/WC. Indicates a malformed TLP was received. 
Receiver Overflow Status (RO) — R/WC. Indicates a receiver overflow occurred. 


Unexpected Completion Status (UC) — R/WC. Indicates an unexpected completion 
was received. 


0 
8 
7 
6 
5 Completion Abort Status (CA) — R/WC. Indicates a completer abort was received. 
4 
3 
2 
i1 


is set if Completion Timeout is enabled and a completion is not returned between 40 
and 50 ms. 


Flow Control Protocol Error Status (FCPE) — RO. Flow Control Protocol Errors not 
supported. 


2 
1 
1 
1 
al 
1 
1 
1 


Poisoned TLP Status (PT) — R/WC. Indicates a poisoned TLP was received 


pu Completion Timeout Status (CT) — R/WC. Indicates a completion timed out. This bit 


Data Link Protocol Error Status (DLPE) — R/WC. Indicates a data link protocol 
error occurred. 


| 0 | Training Error Status (TE) — RO. Training Errors not supported 
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20.1.59 UEM—Uncorrectable Error Mask 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 148h-14Bh Attribute: R/WO, RO 
Default Value: 00000000h Size: 32 bits 


When set, the corresponding error in the UES register is masked, and the logged error 
will cause no action. When cleared, the corresponding error is enabled. 


ES a ee 
31:21 | Reserved 


Unsupported Request Error Mask (URE) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5:144) is 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5:144) is 
masked. 


ECRC Error Mask (EE) — RO. ECRC is not supported. 


Malformed TLP Mask (MT) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5: 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
masked. 


Receiver Overflow Mask (RO) — R/WO. 

0 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
masked. 


masked. 


Completion Abort Mask (CA) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5: 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
masked. 


Completion Timeout Mask (CT) — R/WO. 

0 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
masked. 


Flow Control Protocol Error Mask (FCPE) — RO. Flow Control Protocol Errors not 
supported. 


Poisoned TLP Mask (PT) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5:144) is 
enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5:144) is 
masked. 


Reserved 





Unexpected Completion Mask (UC) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5: 
16 enabled. 

1 = The corresponding error in the UES register (D28: FO/F1/F2/F3/F4/F5: 
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a 
Data Link Protocol Error Mask (DLPE) — R/WO. 

0 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5:144) is 

enabled. 

1 = The corresponding error in the UES register (D28:FO/F1/F2/F3/F4/F5:144) is 


masked. 


Training Error Mask (TE) — RO. Training Errors not supported 


UEV — Uncorrectable Error Severity 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 14Ch-14Fh Attribute: RO 
Default Value: 00060011h Size: 32 bits 


PT oe 
20 
19 
18 
17 
16 
15 
14 
13 
12 
11:5 
3:1 





Unsupported Request Error Severity (URE) — RO. 
0 = Error considered non-fatal. (Default) 

1 = Error is fatal. 

ECRC Error Severity (EE) — RO. ECRC is not supported. 


Malformed TLP Severity (MT) — RO. 

0 = Error considered non-fatal. 

1 = Error is fatal. (Default) 

Receiver Overflow Severity (RO) — RO. 

0 = Error considered non-fatal. 

1 = Error is fatal. (Default) 

Unexpected Completion Severity (UC) — RO. 


0 = Error considered non-fatal. (Default) 
1 = Error is fatal. 


Completion Timeout Severity (CT) — RO. 


0 = Error considered non-fatal. (Default) 
1 = Error is fatal. 


Flow Control Protocol Error Severity (FCPE) — RO. Flow Control Protocol Errors not 
supported. 
Poisoned TLP Severity (PT) — RO. 


0 = Error considered non-fatal. (Default) 
1 = Error is fatal. 


Reserved 


Data Link Protocol Error Severity (DLPE) — RO. 


0 = Error considered non-fatal. 
1 = Error is fatal. (Default) 


Reserved 


| oo | Training Error Severity (TE) — RO. TE is not supported. 


Completion Abort Severity (CA) — RO. 
0 = Error considered non-fatal. (Default) 
1 = Error is fatal. 
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20.1.61 


20.1.62 


CES — Correctable Error Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 150h-153h Attribute: R/WC 
Default Value: 00000000h Size: 32 bits 


ae aa 
31:14 | Reserved 


Advisory Non-Fatal Error Status (ANFES) — R/WC. 
13 | 0 = Advisory Non-Fatal Error did not occur. 
1 = Advisory Non-Fatal Error did occur. 


Replay Timer Timeout Status (RTT) — R/WC. Indicates the replay timer timed out. 


Reserved 


Replay Number Rollover Status (RNR) — R/WC. Indicates the replay number rolled 
over. 


Si eeiageeeieeeiceecies ——— 
[6 [Bea TAP Status (BT) — RIG Indcates bad TP wasveceved.—— 
[0 [Receiver Error Status (RE) — A/G nacates a recover evoromured 


CEM — Correctable Error Mask Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 154h-157h Attribute: R/WO 
Default Value: 00000000h Size: 32 bits 





When set, the corresponding error in the CES register is masked, and the logged error 
will cause no action. When cleared, the corresponding error is enabled. 


a 


Advisory Non-Fatal Error Mask (ANFEM) — R/WO. 
0 = Does not mask Advisory Non-Fatal errors. 
13 1 = Masks Advisory Non-Fatal errors from (a) signaling ERR_COR to the device control 
register and (b) updating the Uncorrectable Error Status register. 


This register is set by default to enable compatibility with software that does not 
comprehend Role-Based Error Reporting. 


[8 [Replay Number Rollover Mask (RNR) — RIWO, Wask for epay number rotover | 
[—s[Bad FUP Mask (BT) AW, Wask or maa TUPrecemion. | 
= 


Reserved 


Receiver Error Mask (RE) — R/WO. Mask for receiver errors. 





Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 809 


] ® 
( | Nn tel ) PCI Express* Configuration Registers 


20.1.63 


20.1.64 


20.1.65 
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AECC — Advanced Error Capabilities and Control Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 158h-15Bh Attribute: RO 
Default Value: 00000000h Size: 32 bits 


Description 


Reserved 
| 8 | ECRC Check Enable (ECE) — RO. ECRC is not supported. 


ECRC Check Capable (ECC) — RO. ECRC is not supported. 
| 6 | ECRC Generation Enable (EGE) — RO. ECRC is not supported. 
ECRC Generation Capable (EGC) — RO. ECRC is not supported. 


| 4:0 | First Error Pointer (FEP) — RO. 


RES — Root Error Status Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 170h-173h Attribute: R/WC, RO 
Default Value: 00000000h Size: 32 bits 





Description 


31:27 Advanced Error Interrupt Message Number (AEMN) — RO. There is only one error 


interrupt allocated. 


3 Multiple ERR_FATAL/ NONFATAL Received (MENR) — RO. For Intel® ICH9, only 
one error will be captured. 
ERR_FATAL/ NONFATAL Received (ENR) — R/WC. 
2 


0 = No error message received. 
1 = Either a fatal or a non-fatal error message is received. 


Multiple ERR_COR Received (MCR) — RO. For |CH9, only one error will be captured. 


ERR_COR Received (CR) — R/WC. 


0 = No error message received. 
1 = A correctable error message is received. 





RCTCL — Root Complex Topology Capability List Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 180-183h Attribute: RO 
Default Value: |00010005h Size: 32 bits 


a 


Next Capability (NEXT) — RO. Indicates the next item in the list, in this case, end of 


B20 | ist, 


Capability Version (CV) — RO. Indicates the version of the capability structure. 


Capability 1D (CID) — RO. Indicates this is a root complex topology capability. 
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20.1.66 


20.1.67 


ESD—Element Self Description Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 184h-187h Attribute: RO 
Default Value: See Description Size: 32 bits 


rr ae 


Port Number (PN) — RO. Indicate the ingress port number for the root port. There is 
a different value per port: 


Port # Value 
1 O1h 
02h 
03h 
04h 
05h 
06h 


Component ID (CID) — RO. This field returns the value of the ESD.CID field (Chipset 
Config Space: Offset 0104h: bits 23:16) of the chip configuration section, that is 
programmed by platform BIOS, since the root port is in the same component as the 


Number of Link Entries (NLE) — RO. The default value of 01h indicates one link 
entry (corresponding to the RCRB). 


Element Type (ET) — RO. The default value of Oh indicates that the element type is a 


15:8 


, root port. 





ULD — Upstream Link Description Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 190h-193h Attribute: RO 
Default Value: 00000001h Size: 32 bits 


ES a 
31:24 | Target Port Number (PN) — RO. Indicates the port number of the RCRB. 
Target Component ID (TCID) — RO. This field returns the value of the ESD.CID field 
23:16 (Chipset Config Space: Offset 0104h: bits 23:16) of the chip configuration section, that 
, is programmed by platform BIOS, since the root port is in the same component as the 
RCRB. 


Link Type (LT) — RO. Indicates that the link points to the Intel® |CH9 RCRB. 
| 0 | Link Valid (LV) — RO. Indicates that this link entry is valid. 
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20.1.69 


20.1.70 
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ULBA — Upstream Link Base Address Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 198h-19Fh Attribute: RO 
Default Value: See Description Size: 64 bits 


| Bit | Description 


3:32 | Base Address Upper (BAU) — RO. The RCRB of the Intel® 1CH9 lives in 32-bit space. 


63: 
31:0 Base Address Lower (BAL) — RO. This field matches the RCBA register 
, (D31:FO: Offset FOh) value in the LPC bridge. 





PECR2 — PCI Express* Configuration Register 2 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 300-303h Attribute: R/W 
Default Value: | 60005007h Size: 32 bits 


a ee 


PEETM — PCI Express* Extended Test Mode Register 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 318h Attribute: RO 
Default Value: See Description Size: 8 bits 


Scrambler Bypass Mode (BAU) — R/W. 

0 = Normal operation. Scrambler and descrambler are used. 

1 = Bypasses the data scrambler in the transmit direction and the data de-scrambler in 
2 





the receive direction. 
NOTE: This functionality intended for debug/testing only. 
NOTE: If bypassing scrambler with |CH9 root port 1 in x4 configuration, each |CH9 root 
port must have this bit set. 





Reserved 
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20.1.71 PEC1 — PCI Express* Configuration Register 1 
(PCI Express—D28:FO/ F1/ F2/ F3/ F4/ F5) 


Address Offset: 324h Attribute: RO, R/W 
Default Value: 14000016h Size: 32 bits 


re 


Reserved 
PEC1 Field 1 — R/W. BIOS must program this field to 40h. 





&¢ 
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21.1 


Table 21-1. 





High Precision Event Timer 
Registers 


The timer registers are memory-mapped in a non-indexed scheme. This allows the 
processor to directly access each register without having to use an index register. The 
timer register space is 1024 bytes. The registers are generally aligned on 64-bit 
boundaries to simplify implementation with |A64 processors. There are four possible 
memory address ranges beginning at 1) FEDO_0000h, 2) FEDO_1000h, 3) 
FEDO_2000h., 4) FEDO_3000h. The choice of address range will be selected by 
configuration bits in the High Precision Timer Configuration Register (Chipset Config 
Registers: Offset 3404h). 


Behavioral Rules: 


1. Software must not attempt to read or write across register boundaries. For 
example, a 32-bit access should be to offset xOh, x4h, x8h, or xCh. 32-bit accesses 
should not be to O1h, 02h, 03h, 05h, 06h, 07h, O9h, OAh, OBh, ODh, OEh, or OFh. 
Any accesses to these offsets will result in an unexpected behavior, and may result 
in a master abort. However, these accesses should not result in system hangs. 64- 
bit accesses can only be to xOh and must not cross 64-bit boundaries. 


2. Software should not write to read-only registers. 


3. Software should not expect any particular or consistent value when reading 
reserved registers or bits. 


Memory Mapped Registers 


ae (ae [= (Sheet 1 of 2) 


| Register | Type | 


0429B17F8 
000-007h GCAP_ID General Capabilities and | dentification 086A301h es] 


| 008-00Fh | OOFh | = — [Reserved sd 


00000000 
010-017h General Configuration 00000000h =~ 


| 018-01Fh | O1Fh | = — [Reserved sd 


—— ——— 
020-027h GINTR_STA I Int t Stat 


a-ha ha Coma ve | 
Oe 
ueum [= [reves SSCS Cd id 
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Table 21-1. Memory-Mapped Registers (Sheet 2 of 2) 


[onset [mnemonic [ neater ———_—‘ eto [ Te 
Psem [= freee 


Paso [= [resenee PY 
pase [Reed 





NOTES: 
1. Reads to reserved registers or bits will return a value of 0. 
2: Software must not attempt locks to the memory-mapped I/O ranges for High Precision 


Event Timers. If attempted, the lock is not honored, which means potential deadlock 
conditions may occur. 


21.1.1 GCAP_!ID—General Capabilities and Identification Register 


Address Offset: OOh Attribute: RO 
Default Value: 0429B17F8086A301h Size: 64 bits 


a 


Main Counter Tick Period (COUNTER_CLK_PER_CAP) — RO. This field indicates 
the period at which the counter increments in femptoseconds (10*-15 seconds). This 
will return 0429B17F when read. This indicates a period of 69841279 fs 

(69.841279 ns). 


Vendor ID Capability (VENDOR_!ID_CAP) — RO. This is a 16-bit value assigned 
to Intel. 


Legacy Replacement Rout Capable (LEG_RT_CAP) — RO. Hardwired to 1. 
Legacy Replacement Interrupt Rout option is supported. 

Reserved. This bit returns 0 when read. 

Counter Size Capability (COUNT_SIZE_CAP) — RO. Hardwired to 1. Counter is 
64-bit wide. 

Number of Timer Capability (NUM_TIM_CAP) — RO. This field indicates the 


number of timers in this block. 
03h = Four timers. 


Revision | dentification (REV_1ID) — RO. This indicates which revision of the 
function is implemented. Default value will be OLh. 
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21.1.2 GEN_CONF—General Configuration Register 


Address Offset: 010h Attribute: R/W 
Default Value: | 00000000 00000000h Size: 64 bits 


63:2 | Reserved. These bits return 0 when read. 


Legacy Replacement Rout (LEG_RT_CNF) — R/W. If the ENABLE_CNF bit and the 
LEG_RT_CNF bit are both set, then the interrupts will be routed as follows: 

Timer 0 is routed to IRQO in 8259 or IRQ2 in the 1/O APIC 

Timer 1 is routed to 1RQ8 in 8259 or IRQ8 in the I/O APIC 

Timer 2-n is routed as per the routing in the timer n config registers. 


If the Legacy Replacement Rout bit is set, the individual routing bits for Timers 0 and 1 (APIC) 
will have no impact. 


If the Legacy Replacement Rout bit is not set, the individual routing bits for each of the timers 
are used. 


This bit will default to 0. BIOS can set it to 1 to enable the legacy replacement routing, or 0 to 
disable the legacy replacement routing. 


Overall Enable (ENABLE_CNF) — R/W. This bit must be set to enable any of the 
timers to generate interrupts. If this bit is 0, then the main counter will halt (will not 
increment) and no interrupts will be caused by any of these timers. For level-triggered 
interrupts, if an interrupt is pending when the ENABLE_CNF bit is changed from 1 to 0, 
the interrupt status indications (in the various Txx_INT_STS bits) will not be cleared. 
Software must write to the Txx_INT_STS bits to clear the interrupts. 


NOTE: This bit will default to 0. BIOS can set it to 1 or O. 





21.1.3 GINTR_STA—General Interrupt Status Register 


Address Offset: O20h Attribute: R/W, R/WC 
Default Value: | 00000000 00000000h Size: 64 bits 


63:4 | Reserved. These bits will return 0 when read. 
Timer 3I nterrupt Active (TO3_INT_STS) — R/W. Same functionality as Timer 0. 
Timer 2 Interrupt Active (TO2_INT_STS) — R/W. Same functionality as Timer 0. 
Timer 1 Interrupt Active (TO1_INT_STS) — R/W. Same functionality as Timer 0. 


Timer O Interrupt Active (TOO_INT_STS) — R/WC. The functionality of this bit 
depends on whether the edge or level-triggered mode is used for this timer. 
(default = 0) 


If set to level-triggered mode: 


This bit will be set by hardware if the corresponding timer interrupt is active. Once 
the bit is set, it can be cleared by software writing a 1 to the same bit position. 
Writes of 0 to this bit will have no effect. 


If set to edge-triggered mode: 
This bit should be ignored by software. Software should always write 0 to this bit. 


NOTE: Defaults to 0. In edge triggered mode, this bit will always read as 0 and writes 
will have no effect. 
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21.1.4 MAIN_CNT—Main Counter Value Register 


Address Offset: OFOh Attribute: R/W 
Default Value: N/A Size: 64 bits 


a 


Counter Value (COUNTER_VAL[63:0]) — R/W. Reads return the current value of 
the counter. Writes load the new value to the counter. 


NOTES: 
Writes to this register should only be done while the counter is halted. 
Reads to this register return the current value of the main counter. 


32-bit counters will always return O for the upper 32-bits of this register. 
If 32-bit software attempts to read a 64-bit counter, it should first halt the 
counter. Since this delays the interrupts for all of the timers, this should be done 
only if the consequences are understood. It is strongly recommended that 32-bit 
software only operate the timer in 32-bit mode. 

. Reads to this register are monotonic. No two consecutive reads return the same 
value. The second of two reads always returns a larger value (unless the timer 
has rolled over to 0). 





21.1.5 TIMn_CONF—Timer n Configuration and Capabilities 


Register 
Address Offset: Timer 0: 100-107h, Attribute: RO, R/W 
Timer 1: 120-127h, 
Timer 2: 140-147h, 
Timer 3: 160-167h, 
Default Value: N/A Size: 64 bit 
Note: The letter n can be 0, 1, 2 or 3 referring to Timer 0, 1, 2 or 3. 


Description 


Reserved. These bits will return 0 when read. 

Timer Interrupt Rout Capability (TIMERn_INT_ROUT_CAP) — RO. 

Timer 0, 1: Bits 52, 53, 54, and 55 in this field (corresponding to IRQ 20, 21, 22, and 
23) have a value of 1. Writes will have no effect. 

Timer 2: Bits 43, 52, 53, 54, and 55 in this field (corresponding to IRQ 11, 20, 21, 
22, and 23) have a value of 1. Writes will have no effect. 

Timer 3: Bits 44, 52, 53, 54, and 55 in this field (corresponding to IRQ 11, 20, 21, 
22, and 23) have a value of 1. Writes will have no effect. 


NOTE: If |RQ 11 is used for HPET #2, software should ensure IRQ 11 is not shared 
with any other devices to ensure the proper operation of HPET #2. 

NOTE: If |RQ 12 is used for HPET #3, software should ensure IRQ 12 is not shared 
with any other devices to ensure the proper operation of HPET #3. 


pa Reserved. These bits return 0 when read. 





818 Intel® 1/O Controller Hub 9 (ICH9) Family Datasheet 


® 
High Precision Event Timer Registers l n tel 


Description 


Interrupt Rout (TIMERn_INT_ROUT_CNF) — R/W. This 5-bit field indicates the 
routing for the interrupt to the 8259 or I/O (x) APIC. Software writes to this field to 
select which interrupt in the 8259 or I/O (x) will be used for this timer’s interrupt. If 
the value is not supported by this particular timer, then the value read back will not 
match what is written. The software must only write valid values. 
NOTES: 
If the interrupt is handled via the 8259, only interrupts 0-15 are applicable and 
valid. Software must not program any value other than 0-15 in this field. 
If the Legacy Replacement Rout bit is set, then Timers 0 and 1 will have a 
different routing, and this bit field has no effect for those two timers. 
Timer 0,1: Software is responsible to make sure it programs a valid value (20, 
21, 22, or 23) for this field. The |CH9 logic does not check the validity of the 
value written. 
Timer 2: Software is responsible to make sure it programs a valid value (11, 20, 
21, 22, or 23) for this field. The |CH9 logic does not check the validity of the 
value written. 
Timer 3: Software is responsible to make sure it programs a valid value (12, 20, 
21, 22, or 23) for this field. The |CH9 logic does not check the validity of the 
value written. 
Timer n 32-bit Mode (TI MERn_32MODE_CNF) — R/W or RO. Software can set 
this bit to force a 64-bit timer to behave as a 32-bit timer. 
Timer 0: Bit is read/write (default to 0). O = 64 bit; 1 = 32 bit 
Timers 1, 2 and 3: Hardwired to 0. Writes have no effect (since these two timers 
are 32-bits). 
NOTE: When this bit is set to ‘1’, the hardware counter will do a 32-bit operation on 


comparator match and rollovers, thus the upper 32-bit of the Timer 0 
Comparator Value register is ignored. The upper 32-bit of the main counter is 
not involved in any rollover from lower 32-bit of the main counter and 
becomes all zeros. 


Reserved. This bit returns 0 when read. 


Timer n Value Set (TIMERn_VAL_SET_CNF) — R/W. Software uses this bit only 
for Timer 0 if it has been set to periodic mode. By writing this bit to a 1, the software 
is then allowed to directly set the timer’s accumulator. Software does not have to 
write this bit back to 1 (it automatically clears). 


Software should not write a 1 to this bit position if the timer is set to non-periodic 


NOTE: This bit will return 0 when read. Writes will only have an effect for Timer 0 if it 
is set to periodic mode. Writes will have no effect for Timers 1, 2 and 3. 


Timer n Size (TIMERn_ SI ZE_CAP) — RO. This read only field indicates the size of 
the timer. 


Timer 0: Value is 1 (64-bits). 
Timers 1, 2 and 3: Value is 0 (32-bits). 


Periodic Interrupt Capable (TIMERn_PER_INT_CAP) — RO. If this bit is 1, the 
hardware supports a periodic mode for this timer’s interrupt. 


Timer 0: Hardwired to 1 (supports the periodic interrupt). 
Timers 1, 2 and 3: Hardwired to 0 (does not support periodic interrupt). 
Timer n Type (TIMERn_TYPE_CNF) — R/W or RO. 


Timer 0: Bit is read/write. 0 = Disable timer to generate periodic 
interrupt; 1 = Enable timer to generate a periodic interrupt. 


Timers 1, 2 and 3: Hardwired to 0. Writes have no affect. 
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Description 
Timer n Interrupt Enable (TIMERn_INT_ENB_CNF) — R/W. This bit must be set 


to enable timer n to cause an interrupt when it times out. 


0 = Disable (Default). The timer can still count and generate appropriate status bits, 
but will not cause an interrupt. 
1 = Enable. 


2 
Timer Interrupt Type (TIMERn_INT_TYPE_CNF) — R/W. 
0 = The timer interrupt is edge triggered. This means that an edge-type interrupt is 
generated. If another interrupt occurs, another edge will be generated. 
dl 


1 = The timer interrupt is level triggered. This means that a level-triggered interrupt 
is generated. The interrupt will be held active until it is cleared by writing to the 
bit in the General Interrupt Status Register. If another interrupt occurs before the 
interrupt is cleared, the interrupt will remain active. 


Reserved. These bits will return 0 when read. 


NOTE: Reads or writes to unimplemented timers should not be attempted. Read from any 
unimplemented registers will return an undetermined value. 





21.1.6 TIMn_COMP—Timer n Comparator Value Register 


Address Offset: Timer 0: 108h-10Fh, 
Timer 1: 128h-12Fh, 
Timer 2: 148h-14Fh, 
Timer 3: 168h-16Fh 
Attribute: R/W 
Default Value: N/A Size: 64 bit 


ae 


Timer Compare Value — R/W. Reads to this register return the current value of the 
comparator. 


Timers 0, 1, 2 or 3 are configured to non- periodic mode: 


Writes to this register load the value against which the main counter should be 
compared for this timer. 
¢ When the main counter equals the value last written to this register, the corresponding 
interrupt can be generated (if so enabled). 
¢ The value in this register does not change based on the interrupt being generated. 
Timer 0 is configured to periodic mode: 
¢ When the main counter equals the value last written to this register, the corresponding 
interrupt can be generated (if so enabled). 


¢ After the main counter equals the value in this register, the value in this register is increased 
by the value last written to the register. 


For example, if the value written to the register is 00000123h, then 


1. An interrupt will be generated when the main counter reaches 00000123h. 

2. The value in this register will then be adjusted by the hardware to 00000246h. 
3. Another interrupt will be generated when the main counter reaches 00000246h 
4. The value in this register will then be adjusted by the hardware to 00000369h 


¢ As each periodic interrupt occurs, the value in this register will increment. When the 
incremented value is greater than the maximum value possible for this register (FFFFFFFFh 
for a 32-bit timer or FFFFFFFFFFFFFFFFh for a 64-bit timer), the value will wrap around 
through 0. For example, if the current value in a 32-bit timer is FFFFOOOOh and the last value 
written to this register is 20000, then after the next interrupt the value will change to 
00010000h 


Default value for each timer is all 1s for the bits that are implemented. For example, 
a 32-bit timer has a default value of OOOOOOOOFFFFFFFFh. A 64-bit timer has a 
default value of FFFFFFFFFFFFFFFFh. 
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22 


Note: 


22.1 


Table 22-1. 


Serial Peripheral I nterface 
(SPI) 


The Serial Peripheral Interface resides in memory mapped space. This function contains 
registers that allow for the setup and programming of devices that reside on the SPI 
interface. 


All registers in this function (including memory-mapped registers) must be addressable 
in byte, word, and dword quantities. The software must always make register accesses 
on natural boundaries (i.e., DWord accesses must be on dword boundaries; word 
accesses on word boundaries, etc.) In addition, the memory-mapped register space 
must not be accessed with the LOCK semantic exclusive-access mechanism. If software 
attempts exclusive-access mechanisms to the SP! memory-mapped space, the results 
are undefined. 


Serial Peripheral Interface Memory Mapped 
Configuration Registers 

The SPI Host Interface registers are memory-mapped in the RCRB (Root Complex 
Register Block) Chipset Register Space with a base address (SPIBAR) of 3800h and are 
located within the range of 3800h to 39FFh. The address for RCRB can be found in 


RCBA Register see Section 13.1.35. The individual registers are then accessible at 
SPIBAR + Offset as indicated in Table 22-1. 


These memory mapped registers must be accessed in byte, word, or dword quantities. 


Serial Peripheral Interface (SPI) Register Address Map 
(SPI Memory Mapped Configuration Registers) (Sheet 1 of 2) 


SPIBAR + ; 
Offset Mnemonic | Register Name | betaute | 
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Table 22-1. 


22.1.1 


Note: 





Serial Peripheral Interface (SPI) 


Serial Peripheral Interface (SPI) Register Address Map 
(SPI Memory Mapped Configuration Registers) (Sheet 2 of 2) 


SPI BAR + ; 
cai remote oe = 


96h-97h | OPTYPE | Opcode Type Configuration 0000h 


00000000 
98h-9Fh OPMENU Opcode Menu Configuration 


00000000h 
BBAR BIOS Base Address Configuration 00000000h 


BOh-B3h FDOC Flash Descriptor Observability Control 00000000h 


B4h-B7h FDOD Flash Descriptor Observability Data 00000000h 


COh-C3h Additional Flash Control 00000000h 


C4-C7h LVSCC Host Lower Vendor Specific Component 00000000h 
Capabilities 

C8-C11h UVSCC Host Upper Vendor Specific Component 00000000h 
Capabilities 


DO-D3h Flash Partition Boundary 00000000h 


BFPR - BIOS Flash Primary Region Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 00h Attribute: RO 
Default Value: © 00000000h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 


a 


BIOS Flash Primary Region Limit (PRL) — RO. This specifies address bits 24:12 for 
28:16 the Primary Region Limit. 


The value in this register loaded from the contents in the Flash 


Descriptor.FLREG1.Region Limit 


The value in this register is loaded from the contents in the Flash 
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BIOS Flash Primary Region Base (PRB) — RO. This specifies address bits 24:12 for 
12:0 the Primary Region Base 


Descriptor. FLREG1.Region Base 
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22.1.2 


HSFS—Hardware Sequencing Flash Status Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 04h Attribute: RO, R/WC, R/W 
Default Value: 0000h Size: 16 bits 


a 


Flash Configuration Lock-Down (FLOCKDN) — R/W/L. When set to 1, those Flash 
Program Registers that are locked down by this FLOCKDN bit cannot be written. Once 
set to 1, this bit can only be cleared by a hardware reset due to a global reset or host 
partition reset in an ME enabled system. 


Flash Descriptor Valid (FDV) — RO. This bit is set to a 1 if the Flash Controller read 
the correct Flash Descriptor Signature. 


If the Flash Descriptor Valid bit is not 1, software cannot use the Hardware Sequencing 
registers, but must use the software sequencing registers. Any attempt to use the 
Hardware Sequencing registers will result in the FCERR bit being set. 


Flash Descriptor Override Pin-Strap Status (FDOPSS) — RO: This register reflects 
the value the Flash Descriptor Override Pin-Strap. 


0 = The Flash Descriptor Override strap is set 
1 = No override 


ae 


SPI Cycle In Progress (SCIP)— RO. Hardware sets this bit when software sets the 

Flash Cycle Go (FGO) bit in the Hardware Sequencing Flash Control register. This bit 

remains set until the cycle completes on the SPI interface. Hardware automatically sets 
5 


and clears this bit so that software can determine when read data is valid and/or when 

it is safe to begin programming the next command. Software must only program the 

next command when this bit is 0. 

NOTE: This field is only applicable when in Descriptor mode and Hardware sequencing 
is being used. 


Block/ Sector Erase Size (BERASE) — RO. This field identifies the erasable sector 
size for all Flash components. 

Valid Bit Settings: 

00 = 256 Byte 

01 =4K Byte 

10 = 8 K Byte 

11 = 64 K Byte 

If the FLA is less than FPBA then this field reflects the value in the LVSCC.LBES register. 


If the FLA is greater or equal to FPBA then this field reflects the value in the 

UVSCC.UBES register. 

NOTE: This field is only applicable when in Descriptor mode and Hardware sequencing 
is being used. 
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Serial Peripheral Interface (SPI) 


Access Error Log (AEL) — R/W/C. Hardware sets this bit to a 1 when an attempt was 

made to access the BIOS region using the direct access method or an access to the 

BIOS Program Registers that violated the security restrictions. This bit is simply a log of 

an access security violation. This bit is cleared by software writing a 1. 

NOTE: This field is only applicable when in Descriptor mode and Hardware sequencing 
is being used. 


Flash Cycle Error (FCERR) — R/W/C. Hardware sets this bit to 1 when an program 
register access is blocked to the FLASH due to one of the protection policies or when 
any of the programmed cycle registers is written while a programmed access is already 
in progress. This bit remains asserted until cleared by software writing a 1 or until 
hardware reset occurs due to a global reset or host partition reset in an ME enabled 


system. Software must clear this bit before setting the FLASH Cycle GO bit in this 

register. 

NOTE: This field is only applicable when in Descriptor mode and Hardware sequencing 
is being used. 


Flash Cycle Done (FDONE) — R/W/C. The ICH sets this bit to 1 when the SPI Cycle 
completes after software previously set the FGO bit. This bit remains asserted until 
cleared by software writing a 1 or hardware reset due to a global reset or host partition 
reset in an ME enabled system. When this bit is set and the SPI SMI# Enable bit is set, 
an internal signal is asserted to the SMI# generation block. Software must make sure 
this bit is cleared prior to enabling the SPI SMI# assertion for a new programmed 
access. 
NOTE: This field is only applicable when in Descriptor mode and Hardware sequencing 
is being used. 





HSFC—Hardware Sequencing Flash Control Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 06h Attribute: R/W, R/WS 
Default Value: 0000h Size: 16 bits 


This register is only applicable when SPI device is in descriptor mode. 


2. re 
Flash SPI SMI# Enable (FSMIE) — R/W. When set to 1, the SPI asserts an SMI# 
request whenever the Flash Cycle Done bit is 1. 


Flash Data Byte Count (FDBC) — R/W. This field specifies the number of bytes to 
shift in or out during the data portion of the SPI cycle. The contents of this register are 
Os based with Ob representing 1 byte and 111111b representing 64 bytes. The number 
of bytes transferred is the value of this field plus 1. 


This field is ignored for the Block Erase command. 
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7:3 Reserved 


FLASH Cycle (FCYCLE) — R/W. This field defines the Flash SPI cycle type generated 
to the FLASH when the FGO bit is set as defined below: 
sei 00 = Read (1 up to 64 bytes by setting FDBC) 


01 = Reserved 
10 = Write (1 up to 64 bytes by setting FDBC) 
11 = Block Erase 


Flash Cycle Go (FGO) — R/W/S. A write to this register with a 1 in this bit initiates a 
request to the Flash SPI Arbiter to start a cycle. This register is cleared by hardware 
when the cycle is granted by the SPI arbiter to run the cycle on the SPI bus. When the 
cycle is complete, the FDONE bit is set. 


Software is forbidden to write to any register in the HSFLCTL register between the FGO 
bit getting set and the FDONE bit being cleared. Any attempt to violate this rule will be 
ignored by hardware. 

Hardware allows other bits in this register to be programmed for the same transaction 
when writing this bit to 1. This saves an additional memory write. 


This bit always returns 0 on reads. 





22.1.4 FADDR—Flash Address Register 


Memory Address: SPIBAR + 08h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


Flash Linear Address (FLA) — R/W. The FLA is the starting byte linear address of a 

SPI Read or Write cycle or an address within a Block for the Block Erase command. The 
Flash Linear Address must fall within a region for which BIOS has access permissions. 

Hardware must convert the FLA into a Flash Physical Address (FPA) before running this 
cycle on the SPI bus. 





22.1.5 FDATAO—Flash Data O Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 10h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


Flash Data 0 (FDO) — R/W. This field is shifted out as the SPI Data on the Master-Out 
Slave-In Data pin during the data portion of the SPI cycle. 


This register also shifts in the data from the Master-In Slave-Out pin into this register 
during the data portion of the SPI cycle. 


The data is always shifted starting with the least significant byte, msb to Isb, followed 


by the next least significant byte, msb to Isb, etc. Specifically, the shift order on SPI in 
terms of bits within this register is: 7-6-5-4-3-2-1-0-15-14-13-..8-23-22-..16-31..24 
Bit 24 is the last bit shifted out/in. There are no alignment assumptions; byte 0 always 
represents the value specified by the cycle address. 


Note that the data in this register may be modified by the hardware during any 
programmed SPI transaction. Direct Memory Reads do not modify the contents of this 
register. 
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FDATAN—Flash Data [N] Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: 


Default Value: 


a 


SPIBAR + 14h 
SPIBAR + 18h 
SPIBAR + 1Ch 
SPIBAR + 20h 
SPIBAR + 24h 
SPIBAR + 28h 
SPIBAR + 2Ch 
SPIBAR + 30h 
SPIBAR + 34h 
SPIBAR + 38h 
SPIBAR + 3Ch 
SPIBAR + 40h 
SPIBAR + 44h 
SPIBAR + 48h 
SPIBAR + 4Ch 
00000000h 


Attribute: R/W 


Size: 32 bits 


Flash Data N (FD[N]) — R/W. Similar definition as Flash Data 0. However, this 
register does not begin shifting until FD[N-1] has completely shifted in/out.— R/W. 
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22.1.7 


Note: 


FRAP—Flash Regions Access Permissions Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address:SPIBAR + 50h Attribute: RO, R/W 
Default Value: 00000202h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 


a 


BIOS Master Write Access Grant (BMWAG) — R/W. Each bit [31:29] corresponds 
to Master[7:0]. BIOS can grant one or more masters write access to the BIOS region 1 
overriding the permissions in the Flash Descriptor. 

Master[1] is Host processor/BIOS, Master[2] is Management Engine, Master[ 3] is Host 
processor/GbE. Master[0] and Master[7:4] are reserved. 

The contents of this register are locked by the FLOCKDN bit. 


BIOS Master Read Access Grant (BMRAG) — R/W. Each bit [28:16] corresponds to 
Master[ 7:0]. BIOS can grant one or more masters read access to the BIOS region 1 
overriding the read permissions in the Flash Descriptor. 

Master[1] is Host processor/BIOS, Master[2] is Management Engine, Master[3] is Host 
processor/GbE. Master[0] and Master[ 7:4] are reserved. 

The contents of this register are locked by the FLOCKDN bit 


BIOS Region Write Access (BRWA) — RO. Each bit [15:8] corresponds to Regions 
[7:0]. If the bit is set, this master can erase and write that particular region through 
register accesses. 

The contents of this register are that of the Flash Descriptor. Flash Master 1 Master 
Region Write Access OR a particular master has granted BIOS write permissions in their 
Master Write Access Grant register or the Flash Descriptor Security Override strap is 
set. 


BIOS Region Read Access (BRRA) — RO. Each bit [7:0] corresponds to Regions 
[7:0]. If the bit is set, this master can read that particular region through register 
accesses. 


The contents of this register are that of the Flash Descriptor.Flash Master 1.Master 
Region Write Access OR a particular master has granted BIOS read permissions in their 
Master Read Access Grant register or the Flash Descriptor Security Override strap is 
set. 
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Note: 


22.1.9 


Note: 
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FREGO—Flash Region 0 (Flash Descriptor) Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 54h Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 


a 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region O Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor.FLREGO.Region Limit 


Region Base (RB) / Flash Descriptor Base Address Region (FDBAR) — RO. This 

12:0 specifies address bits 24:12 for the Region 0 Base 
‘ The value in this register is loaded from the contents in the Flash 
Descriptor.FLREGO.Region Base 





FREG1—Flash Region 1 (BIOS Descriptor) Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 58h Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 


a 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 1 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor.FLREG1.Region Limit 


Region Base (RB) — RO. This specifies address bits 24:12 for the Region 1 Base 
12:0 | The value in this register is loaded from the contents in the Flash 


Descriptor.FLREG1.Region Base 
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Note: 


22.1.11 


Note: 


FREG2—Flash Region 2 (ME) Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 5Ch Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 


a 
31:29 | Reserved 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 2 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG2.Region Limit 


15:13 | Reserved 

Region Base (RB) — RO. This specifies address bits 24:12 for the Region 2 Base 
12:0 | The value in this register is loaded from the contents in the Flash 

Descriptor. FLREG2.Region Base 


FREG3—Flash Region 3 (GbE) Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 60h Attribute: RO 
Default Value: | 00000000h Size: 32 bits 


This register is only applicable when SPI device is in descriptor mode. 





rr 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 3 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG3.Region Limit 


Region Base (RB) — RO. This specifies address bits 24:12 for the Region 3 Base 


The value in this register is loaded from the contents in the Flash 
Descriptor. FLREG3.Region Base 
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22.1.12 FREG4—Flash Region 4 (Platform Data) Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 64h Attribute: RO 
Default Value: | 00000000h Size: 32 bits 
Note: This register is only applicable when SPI device is in descriptor mode. 


a 
2 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 4 Limit. 
8:16 | The value in this register is loaded from the contents in the Flash 


Descriptor.FLREG4.Region Limit 


Region Base (RB) — RO. This specifies address bits 24:12 for the Region 4 Base 
12:0 The value in this register is loaded from the contents in the Flash 


15: 
2: 
Descriptor.FLREG4.Region Base 





22.1.13 PRO—Protected Range O Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 74h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 
Note: This register can not be written when the FLOCKDN bit is set to 1. 


se 
Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 


when this bit is cleared. 


Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 

28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 

, FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.1.14 PR1—Protected Range 1 Register 


Note: 


(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 78h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register can not be written when the FLOCKDN bit is set to 1. 


pM ee 
a Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 


fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 
when this bit is cleared. 


30:29 | Reserved 
Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 
28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 
, FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 

15 fields in this register are valid and that read directed to addresses between them 
(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 
? 000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.1.15 PR2—Protected Range 2 Register 


Note: 


832 


(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 7Ch Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register can not be written when the FLOCKDN bit is set to 1. 


se 
pe Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 


fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 
when this bit is cleared. 


Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 

28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 

: FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.1.16 PR3—Protected Range 3 Register 


Note: 


(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 80h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register can not be written when the FLOCKDN bit is set to 1. 


Ss 
pe Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 


fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 
when this bit is cleared. 


30:29 | Reserved 
Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 
28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 
, FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.1.17 PR4—Protected Range 4 Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 84h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 
Note: This register can not be written when the FLOCKDN bit is set to 1. 


se 
Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 


when this bit is cleared. 


Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 

28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 

: FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when this 
bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this field 
is unaffected by this protected range. 
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22.1.18 SSFS—Software Sequencing Flash Status Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 90h Attribute: RO, R/WC 
Default Value: 00h Size: 8 bits 
Note: The Software Sequencing control and status registers are reserved if the hardware 


sequencing control and status registers are used. 


a 


7:5 Reserved 


Access Error Log (AEL) — RO. This bit reflects the value of the Hardware Sequencing 
Status AEL register. 


Flash Cycle Error (FCERR) — R/WC. Hardware sets this bit to 1 when a programmed 
access is blocked from running on the SPI interface due to one of the protection policies 
or when any of the programmed cycle registers is written while a programmed access is 
already in progress. This bit remains asserted until cleared by software writing a 1 or 
hardware reset due to a global reset or host partition reset in an ME enabled system. 


Cycle Done Status — R/WC. The ICH sets this bit to 1 when the SPI Cycle completes 
(i.e., SCIP bit is 0) after software sets the GO bit. This bit remains asserted until cleared 
) by software writing a 1 or hardware reset due to a global reset or host partition reset in 
an ME enabled system. When this bit is set and the SPI SMI# Enable bit is set, an 
internal signal is asserted to the SMI# generation block. Software must make sure this 


bit is cleared prior to enabling the SPI SMI# assertion for a new programmed access. 


SPI Cycle In Progress (SCIP) — RO. Hardware sets this bit when software sets the 
SPI Cycle Go bit in the Command register. This bit remains set until the cycle completes 
on the SPI interface. Hardware automatically sets and clears this bit so that software 


can determine when read data is valid and/or when it is safe to begin programming the 
next command. Software must only program the next command when this bit is 0. 
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22.1.19 SSFC—Software Sequencing Flash Control Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 91h Attribute: R/W 
Default Value: 000000h Size: 24 bits 


a 


SPI Cycle Frequency (SCF) — R/W. This register sets frequency to use for all SPI 
software sequencing cycles (write, erase, fast read, read status, etc.) except for the 
read cycle which always run at 20MHz. 
18:16 
15 


000 = 20 MHz 

001 = 33 MHz 

All other values reserved. 

This register is locked when the SPI Configuration Lock-Down bit is set. 


SPI SMI # Enable (SME) — R/W. When set to 1, the SPI asserts an SMI# request 
whenever the Cycle Done Status bit is 1. 


Data Cycle (DS) — R/W. When set to 1, there is data that corresponds to this 
transaction. When 0, no data is delivered for this cycle, and the DBC and data fields 
themselves are don’t cares 


Data Byte Count (DBC) — R/W. This field specifies the number of bytes to shift in or 
out during the data portion of the SPI cycle. The valid settings (in decimal) are any 
value from 0 to 63. The number of bytes transferred is the value of this field plus 1. 


Note that when this field is 00_0000b, then there is 1 byte to transfer and that 
11_1111b means there are 64 bytes to transfer. 


Cycle Opcode Pointer (COP) — R/W. This field selects one of the programmed 
opcodes in the Opcode Menu to be used as the SPI Command/Opcode. In the case of an 
Atomic Cycle Sequence, this determines the second command. — R/W. 


Sequence Prefix Opcode Pointer (SPOP) — R/W. This field selects one of the two 
programmed prefix opcodes for use when performing an Atomic Cycle Sequence. A 
value of 0 points to the opcode in the least significant byte of the Prefix Opcodes 
register. By making this programmable, the ICH supports flash devices that have 
different opcodes for enabling writes to the data space vs. status register. 


Atomic Cycle Sequence (ACS) — R/W. When set to 1 along with the SCGO assertion, 
the ICH9 will execute a sequence of commands on the SPI interface without allowing 
the LAN component to arbitrate and interleave cycles. The sequence is composed of: 

« Atomic Sequence Prefix Command (8-bit opcode only) 

¢« Primary Command specified below by software (can include address and data) 

¢ Polling the Flash Status Register (opcode 05h) until bit 0 becomes Ob. 
The SPI Cycle in Progress bit remains set and the Cycle Done Status bit remains unset 
until the Busy bit in the Flash Status Register returns 0. 


SPI Cycle Go (SCGO) — R/WS. This bit always returns 0 on reads. However, a write to 
this register with a 1 in this bit starts the SPI cycle defined by the other bits of this 
register. The “SPI Cycle in Progress” (SCIP) bit gets set by this action. Hardware must 
ignore writes to this bit while the Cycle In Progress bit is set. 


Hardware allows other bits in this register to be programmed for the same transaction 
when writing this bit to 1. This saves an additional memory write. 


pores CS 
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22.1.20 PREOP—Prefix Opcode Configuration Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 94h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


ee 


Prefix Opcode 1— R/W. Software programs an SPI opcode into this field that is 


Prefix Opcode 0 — R/W. Software programs an SPI opcode into this field that is 
permitted to run as the first command in an atomic cycle sequence. 





permitted to run as the first command in an atomic cycle sequence. 


NOTE: This register is not writable when the Flash Configuration Lock-Down bit (SPIBAR + 
04h:15) is set. 


22.11.21 OPTYPE—Opcode Type Configuration Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 96h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


Entries in this register correspond to the entries in the Opcode Menu Configuration 
register. 


Note: The definition below only provides write protection for opcodes that have addresses 
associated with them. Therefore, any erase or write opcodes that do not use an address 
should be avoided (for example, “Chip Erase” and “Auto-Address Increment Byte 
Program”) 


a 
[5:8 [Opcode Type #— RMI Seethe desciptonforbisO 


Opcode Type 1 — R/W. See the description for bits 1:0 


Opcode Type 0 — R/W. This field specifies information about the corresponding 
Opcode 0. This information allows the hardware to 1) know whether to use the address 
field and 2) provide BIOS and Shared Flash protection capabilities. The encoding of the 


two bits is: 

00 = No address associated with this Opcode; Read cycle type 
01 = No address associated with this Opcode; Write cycle type 
10 = Address required; Read cycle type 

11 = Address required; Write cycle type 





NOTE: This register is not writable when the SPI Configuration Lock-Down bit (SPIBAR + 00h: 15) 
is set. 
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22.1.22 OPMENU—Opcode Menu Configuration Register 


Note: 


838 


(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + 98h Attribute: R/W 
Default Value: 0000000000000000h _ Size: 64 bits 


Eight entries are available in this register to give BIOS a sufficient set of commands for 
communicating with the flash device, while also restricting what malicious software can 
do. This keeps the hardware flexible enough to operate with a wide variety of SPI 
devices. 


It is recommended that BIOS avoid programming Write Enable opcodes in this menu. 
Malicious software could then perform writes and erases to the SPI flash without using 
the atomic cycle mechanism. This could cause functional failures in a shared flash 
environment. Write Enable opcodes should only be programmed in the Prefix Opcodes. 


a 


7:0 Allowable Opcode O — R/W. Software programs an SPI opcode into this field for use 
7 when initiating SPI commands through the Control Register. 


This register is not writable when the SPI Configuration Lock-Down bit (SPIBAR + 
00h: 15) is set. 
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22.1.23 BBAR—BIOS Base Address Configuration Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + AOh Attribute: R/W, RO 
Default Value: 00000000h Size: 32 bits 


Eight entries are available in this register to give BIOS a sufficient set of commands for 
communicating with the flash device, while also restricting what malicious software can 
do. This keeps the hardware flexible enough to operate with a wide variety of SPI 
devices. 


9 Se 
31:24 | Reserved 


Bottom of System Flash— R/W. This field determines the bottom of the System 
BIOS. The 1CH9 will not run programmed commands nor memory reads whose address 
field is less than this value. this field corresponds to bits 23:8 of the 3-byte address; 
bits 7:0 are assumed to be OOh for this vector when comparing to a potential SPI 

23:8 


address. 


Note: The SPI host controller prevents any programmed cycle using the address 
register with an address less than the value in this register. Some flash devices specify 
that the Read ID command must have an address of 0000h or OOOLN. If this command 
must be supported with these device, it must be performed with the BIOS Bar 


Reserved 


22.1.24 FDOC—Flash Descriptor Observability Control Register 
(SPI Memory Mapped Configuration Registers) 





Memory Address: SPIBAR + BOh Attribute: R/W 
Default Value: | 00000000h Size: 32 bits 
Note: This register that can be used to observe the contents of the Flash Descriptor that is 


stored in the |CH9 Flash Controller. This register is only applicable when SPI device is in 
descriptor mode. 


a 


Flash Descriptor Section Select (FDSS) — R/W. Selects which section within the 
loaded Flash Descriptor to observe. 


000 = Flash Signature and Descriptor Map 
001 = Component 


010 = Region 
011 = Master 


111 = Reserved 


Flash Descriptor Section I ndex (FDSI) — R/W. Selects the DW offset within the 
11:2 . : 
Flash Descriptor Section to observe. 


Reserved 
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22.1.25 


Note: 


22.1.26 


840 


FDOD—Flash Descriptor Observability Data Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + B4h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


This register that can be used to observe the contents of the Flash Descriptor that is 
stored in the ICH9 Flash Controller. 


a 


Flash Descriptor Section Data (FDSD) — RO. Returns the DW of data to observe as 


at selected in the Flash Descriptor Observability Control. 





AFC—Additional Flash Control Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + COh Attribute: RO, R/W 
Default Value: 00000000h Size: 32 bits. 


Flash Controller Interface Dynamic Clock Gating Enable — R/W. 


0 = Flash Controller Interface Dynamic Clock Gating is Disabled 
1 = Flash Controller Interface Dynamic Clock Gating is Enabled 


Other configurations are Reserved. 


Flash Controller Core Dynamic Clock Gating Enable — R/W. 


0 = Flash Controller Core Dynamic Clock Gating is Disabled 
1 = Flash Controller Core Dynamic Clock Gating is Enabled 
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22.1.27 LVSCC— Host Lower Vendor Specific Component 
Capabilities Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + C4h Attribute: RO, RWL 
Default Value: | 00000000h Size: 32 bits 
Note: All attributes described in LVSCC must apply to all flash space below the FPBA, even if 


it spans between two separate flash parts. This register is only applicable when SPI 
device is in descriptor mode. 


| Bit | Description 
31:24 | Reserved. 


Vendor Component Lock (LVCL) — RW. This register locks itself when set. 
23, | 0 = The lock bit is not set 


1 = The Vendor Component Lock bit is set. 


72:16 


Lower Erase Opcode (LEO) — RW. This register is programmed with the Flash erase 
instruction opcode required by the vendor’s Flash component. 


This register is locked by the Vendor Component Lock (LVCL) bit. 


Write Enable on Write Status (LWEWS) — RW. This register is locked by the Vendor 

Component Lock (LVCL) bit. 

0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase to 
unlock the flash component. O6h is the opcode used to unlock the Status register. 


This is not an atomic sequence. If the SPI component’s status register is non- 
volatile, then BIOS should issue an atomic software sequence cycle to unlock the 
flash part. 
This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This 
may lead to premature flash wear out. 
Bit 3 and bit 4 should NOT be both set to ‘1’. 
Lower Write Status Required (LWSR) — RW. This register is locked by the Vendor 
Component Lock (LVCL) bit. 
0 = No requirement to write to the Status Register prior to a write 
1 = A write of 00h to the SPI flash’s status register is required prior to write and erase to 
unlock the flash component. 50h is the opcode used to unlock the Status register. 


This is not an atomic sequence. If the SPI component's status register is non- 
volatile, then an atomic software sequencing should be used to unlock the flash 
part. 

This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This 
may lead to premature flash wear out. 

Bit 3 and bit 4 should NOT be both set to ‘1’. 
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Lower Write Granularity (LWG) — RW. This register is locked by the Vendor 
Component Lock (LVCL) bit. 


0 =1 Byte 
1 = 64 Byte 


NOTES: 

1. If more than one Flash component exists, this field must be set to the lowest 
common write granularity of the different Flash components. 

2. If using 64 B write, BIOS must ensure that multiple byte writes do not occur over 256 B 
boundaries. This will lead to corruption as the write will wrap around the page boundary on 
the SPI flash part. This is a feature page writeable SPI flash. 

Lower Block/ Sector Erase Size (LBES)— RW. This field identifies the erasable sector 

size for all Flash components. 

00 = 256 Byte 

01 =4KB 

10 = 8 KB 

11 = 64 KB 

This register is locked by the Vendor Component Lock (LVCL) bit. 

Hardware takes no action based on the value of this register. The contents of this 

register are to be used only by software and can be read in the HSFSTS.BERASE register 

in both the BIOS and the GbE program registers if FLA is less than FPBA. 





22.1.28 UVSCC— Host Upper Vendor Specific Component 
Capabilities Register 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + C8h Attribute: RO, RWL 
Default Value: | 00000000h Size: 32 bits 
Note: All attributes described in UVSCC must apply to all flash space equal to or above the 


FPBA, even if it spans between two separate flash parts. This register is only applicable 
when SPI device is in descriptor mode. 


a 


Vendor Component Lock (UVCL) — RW. 


0 = The lock bit is not set 
1 = The Vendor Component Lock bit is set. 


This register locks itself when set. 


Upper Erase Opcode (UEO) — RW. This register is programmed with the Flash erase 
instruction opcode required by the vendor’s Flash component. 


This register is locked by the Vendor Component Lock (UVCL) bit. 
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Write Enable on Write Status (UWEWS) — RW.This register is locked by the Vendor 
Component Lock (UVCL) bit. 


0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. O6h is the opcode used to unlock the Status 
register. 


NOTES: 
This is not an atomic sequence. If the SPI component’s status register is non- 
volatile, then BIOS should issue an atomic software sequence cycle to unlock 
the flash part. 
This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This may lead 


to premature flash wear out. 
Bit 3 and bit 4 should NOT be both set to ‘1’. 


Upper Write Status Required (UWSR) — RW. This register is locked by the Vendor 
Component Lock (UVCL) bit. 


0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. 50h is the opcode used to unlock the Status 
register. 


NOTES: 
This is not an atomic sequence. If the SPI component's status register is non- 
volatile, then an atomic software sequencing should be used to unlock the flash 
part. 


his bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This may lead to 
Tpremature flash wear out. 
Bit 3 and bit 4 should NOT be both set to ‘1’. 


Upper Write Granularity (UWG) — RW. This register is locked by the Vendor 
Component Lock (UVCL) bit. 

0 =1 Byte 

1 = 64 Byte 


NOTES: 

1. If more than one Flash component exists, this field must be set to the lowest 
common write granularity of the different Flash components. 

2: If using 64 B write, BIOS must ensure that multiple byte writes do not occur over 256 B 


boundaries. This will lead to corruption as the write will wrap around the page boundary on 
the SPI flash part. This is a a feature page writeable SPI flash. 


Upper Block/ Sector Erase Size (UBES)— RW. This field identifies the erasable 
sector size for all Flash components. 

Valid Bit Settings: 

00 = 256 Byte 

01 =4 KB 

10 = 8 KB 

11 = 64 KB 

This register is locked by the Vendor Component Lock (UVCL) bit. 


Hardware takes no action based on the value of this register. The contents of this 
register are to be used only by software and can be read in the HSFSTS.BERASE 
register in both the BIOS and the GbE program registers if FLA is greater or equal to 
FPBA. 
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22.1.29 FPB — Flash Partition Boundary 
(SPI Memory Mapped Configuration Registers) 


Memory Address: SPIBAR + DOh Attribute: RO 
Default Value: | 00000000h Size: 32 bits 
Note: This register is only applicable when SPI device is in descriptor mode. 


a 





12:0 Flash Partition Boundary Address (FPBA) — RO. This register reflects the value of 
: Flash Descriptor Component FPBA field. 
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22.2 


22.2.1 


22.2.1.1 


22.2.1.2 


Flash Descriptor Registers 


The following sections describe the data structure of the Flash Descriptor on the SPI 
device. These are not registers within |CH9. 


Flash Descriptor Content 
FLVALSIG - Flash Valid Signature Register (Flash Descriptor 
Registers) 


Memory Address: FDBAR + 000h Default Value: h 
Size: 32 bits 


sa 


Flash Valid Signature. This field identifies the Flash Descriptor sector as valid. If the 


contents at this location contain OFFOA55Ah, then the Flash Descriptor is considered 
valid and it will operate in Descriptor Mode, else it will operate in Non-Descriptor Mode. 





FLMAPO - Flash Map 0 Register (Flash Descriptor Registers) 


Memory Address: FDBAR + 004h Default Value: h 
Size: 32 bits 


9 a ee 


Number Of Regions (NR). This field identifies the total number of Flash Regions. This 
26:24 | number is O's based, so a setting of all O's indicates that the only Flash region is region 

0, the Flash Descriptor region. 

Flash Region Base Address (FRBA). This identifies address bits [11:4] for the Region 
23:16 | portion of the Flash Descriptor. Bits [24:12] and bits [3:0] are 0. 

A recommended FRBA is 04h. 


01 = 2 Components and GPIO58 defaults as native functionality, SPI_CS1#. 
All other settings = Reserved 


Flash Component Base Address (FCBA). This identifies address bits [11:4] for the 
Component portion of the Flash Descriptor. Bits [24:12] and bits [3:0] are 0. 


A recommended FCBA is O1h. 





Number Of Components (NC). This field identifies the total number of Flash 
Components. Each supported Flash Component requires a separate chip select. This 
register also determines the default mode for GPIO58 (Desktop Only). 

00 = 1 Component and GPIO58 defaults as GPO. 
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22.2.1.3 FLMAP1—Flash Map 1 Register (Flash Descriptor Registers) 


Memory Address: FDBAR + 008h Default Value:  h 
Size: 32 bits 


a 


ICH Strap Length (ISL). Identifies the 1s based number of Dwords of ICH Straps to 
31:24 | be read, up to 255 DWs (1KB) max. A setting of all O's indicates there are no ICH DW 
straps. 


Flash ICH Strap Base Address (FISBA). This identifies address bits [11:4] for the 
23:16 | ICH Strap portion of the Flash Descriptor. Bits [24:12] and bits [3:0] are 0. 


For validation purposes, the recommended FISBA is 10h 


10:08 Number Of Masters (NM). This field identifies the total number of Flash Regions. This 
: number is O's based. 


Flash Master Base Address (FMBA). This identifies address bits [11:4] for the 
Master portion of the Flash Descriptor. Bits [24:12] and bits [3:0] are 0. 


A recommended FMBA is O6h. 





22.2.1.4 FLMAP2—Flash Map 2 Register (Flash Descriptor Registers) 


Memory Address: FDBAR + 00Ch Default Value: h 
Size: 32 bits 


Cs 
31:16 | Reserved 


MCH Strap Length (MSL). Identifies the 1's based number of Dwords of MCH Straps 
to be read, up to 255 DWs (1KB) max. A setting of all 0's indicates there are no MCH 


DW straps. 


Flash MCH Strap Base Address (FMSBA). This identifies address bits [11:4] for the 
MCH Strap portion of the Flash Descriptor. Bits [24:12] and bits [3:0] are 0. 


A recommended FMSBA is 20h. 
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22.2.2 Flash Descriptor Component Section 


The following section of the Flash Descriptor is used to identify the different Flash 
Components and their capabilities. 


22.2.2.1 FLCOMP—Flash Components Register (Flash Descriptor Registers) 


Memory Address: FCBA + 000h Default Value: h 
Size: 32 bits 


ee eee ae 
31:30 | Reserved 


Read ID and Read Status Clock Frequency. 
000 = 20 MHz 
001 = 33 MHz 
29:27 | All other Settings = Reserved 
NOTE: If more than one Flash component exists, this field must be set to the lowest 
common frequency of the different Flash components. 
Write and Erase Clock Frequency. 
000 = 20 MHz 
001 = 33 MHz 
26:24 | All other Settings = Reserved 
NOTE: If more than one Flash component exists, this field must be set to the lowest 
common frequency of the different Flash components. 


Fast Read Clock Frequency. This field identifies the frequency that can be used with 
the Fast Read instruction. This field is undefined if the Fast Read Support field is '0'. 
000 = 20 MHz 

23:21 001 = 33 MHz 
All other Settings = Reserved 


NOTE: If more than one Flash component exists, this field must be set to the lowest 
common frequency of the different Flash components. 


Fast Read Support. 

0 = Fast Read is not Supported 

1 = Fast Read is supported 

If the Fast Read Support bit is a'1' and a device issues a Direct Read or issues a read 

command from the Hardware Sequencer and the length is greater than 4 bytes, then 
20 the SPI Flash instruction should be "Fast Read". If the Fast Read Support is a '0' or the 

length is 1-4 bytes, then the SPI Flash instruction should be "Read". 


Reads to the Flash Descriptor always use the Read command independent of the 
setting of this bit. 


NOTE: If more than one Flash component exists, this field can only be set to '1' if both 
components support Fast Read. 


Read Clock Frequency. 
000 = 20 MHz 
19:17 | All other Settings = Reserved 
NOTE: If more than one Flash component exists, this field must be set to the lowest 
common frequency of the different Flash components. 
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Serial Peripheral Interface (SPI) 


Component 2 Density. This field identifies the size of the 2nd Flash component. If 
there is not 2nd Flash component, the contents of this field are undefined. 


000 = 512 KB 
001 = 1 MB 
010 = 2 MB 
011 = 4 MB 
100 = 8 MB 
101 = 16 MB 
111 = Reserved 
Component 1 Density. This field identifies the size of the 1st or only Flash 
component. 
000 = 512 KB 
001 = 1 MB 
010 = 2 MB 
011 = 4 MB 
100 = 8 MB 
101 = 16 MB 
111 = Reserved 


This field is defaulted to "101b" (16 MB) after reset. In non-descriptor mode, only one 
flash component is supported and all accesses to flash will be to this component. 
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22.2.2.2 FLILL—Flash Invalid Instructions Register (Flash Descriptor 


Registers) 
Memory Address: FCBA + 004h Default Value: h 
Size: 32 bits 


Ls 


31:24 | Invalid Instruction 3. See definition of Invalid Instruction 0 
23:16 | Invalid Instruction 2. See definition of Invalid Instruction 0 
Invalid Instruction 1. See definition of Invalid Instruction 0 


in the Software Sequencing Opcode Menu Configuration and Prefix-Opcode 
Configuration are not allowed o use any of the Invalid Instructions listed in this 
register. 





Invalid Instruction 0. Op-code for an invalid instruction in the that the Flash 
Controller should protect against such as Chip Erase. This byte should be set to 0 if 
7:0 there are no invalid instructions to protect against for this field. Op-codes programmed 


22.2.2.3 FLPB—Flash Partition Boundary Register (Flash Descriptor Registers) 


Memory Address: FCBA + 008h Default Value: h 
Size: 32 bits 


5 a 


Flash Partition Boundary Address (FPBA). This register specifies Flash Boundary 

Address bits[24:12] that logically divides the flash space into two partitions, a lower 

and an upper partition. The lower and upper partitions can support SPI flash parts with 

different attributes between partitions that are defined in the LVSCC and UVSCC. 
12:0 


NOTE: All flash space in each partition must have the same in the VSCC attributes, 
even if it spans between different flash parts. 


NOTE: If this register is set to all Os, then there is only one partition, the upper 
partition, and the entire address space has uniform erasable sector sizes, write 
granularity, and write state required settings. The FPBA must reside on an 
erasable sector boundary. 
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22.2.3.1 


22.2.3.2 


850 


Flash Descriptor Region Section 


The following section of the Flash Descriptor is used to identify the different Flash 
Regions 


Flash Regions: 


¢ Ifa particular region is not using SPI Flash, the particular region should be disabled 
by setting the Region Base to all 1's, and the Region Limit to all 0's (base is higher 
than the limit) 


¢ For each region except FLREGO, the Flash Controller must have a default Region 
Base of FFFh and the Region Limit to 000h within the Flash Controller in case the 
Number of Regions specifies that a region is not used. 


FLREGO—Flash Region O Register (Flash Descriptor Registers) 


Memory Address: FRBA + 000h Default Value: h 
Size: 32 bits 


Lo 


1:29 | Reserved 
28:16 | Region Limit. This specifies address bits 24:12 for the Region Limit. 


15:13 | Reserved 


Region Base. This specifies address bits 24:12 for the Region Base. 





FLREG1—Flash Region 1 (BIOS) Register (Flash Descriptor Registers) 


Memory Address: FRBA + 004h Default Value: h 
Size: 32 bits 


a 


28:16 | Region Limit. This specifies address bits 24:12 for the Region Limit. 


Region Base. This specifies address bits 24:12 for the Region Base. 
aoe NOTE: If the BIOS region is not used, the Region Base must be programmed to 1FFFh 


and the Region Limit to 0000h to disable the region. 
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22.2.3.3 


22.2.3.4 


22.2.3.5 


FLREG2—Flash Region 2 (ME) Register (Flash Descriptor Registers) 


Memory Address: FRBA + 008h Default Value: h 
Size: 32 bits 


oo 
31:29 | Reserved 


28:16 | Region Limit. This specifies address bits 24:12 for the Region Limit. 


15:13 | Reserved 
Region Base. This specifies address bits 24:12 for the Region Base. 
1 NOTE: If the Management Engine region is not used, the Region Base must be 


programmed to 1FFFh and the Region Limit to 0000h to disable the region. 





FLREG3—Flash Region 3 (GbE) Register (Flash Descriptor Registers) 


Memory Address: FRBA + 00Ch Default Value: h 
Size: 32 bits 


a 


Region Limit. This specifies address bits 24:12 for the Region Limit. 
28:16 
NOTE: The maximum Region Limit is 128KB above the region base. 
Region Base. This specifies address bits 24:12 for the Region Base. 
ea NOTE: If the GbE region is not used, the Region Base must be programmed to 1FFFh 


and the Region Limit to 0000h to disable the region. 





FLREG4—Flash Region 4 (Platform Data) Register (Flash Descriptor 
Registers) 


Memory Address: FRBA + 010h Default Value: h 
Size: 32 bits 


a 


Region Limit. This specifies address bits 24:12 for the Region Limit. 
28:16 
NOTE: The maximum Region Limit is 128KB above the region base. 


Region Base. This specifies address bits 24:12 for the Region Base. 
ne NOTE: If the Platform Data region is not used, the Region Base must be programmed 


to 1FFFh and the Region Limit to 0000h to disable the region. 
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22.2.4 Flash Descriptor Master Section 


22.2.4.1 FLMSTR1—Flash Master 1 (Host CPU/ BIOS) (Flash Descriptor 


Registers) 
Memory Address: FMBA + 000h Default Value: h 
Size: 32 bits 


oo 


31:29 | Reserved, must be zero 
2 
2 
2 
2 


Platform Data Region Write Access. If the bit is set, this master can erase and write 
that particular region through register accesses. 


GbE Region Write Access. If the bit is set, this master can erase and write that 
particular region through register accesses. 


particular region through register accesses. 
Host CPU/ BIOS Master Region Write Access. If the bit is set, this master can erase 
and write that particular region through register accesses. 


Bit 25 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


ME Region Write Access. If the bit is set, this master can erase and write that 


24 Flash Descriptor Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


23:21 | Reserved, must be zero 
Platform Data Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 
GbE Region Read Access. If the bit is set, this master can read that particular region 
through register accesses 


18 ME Region Read Access. If the bit is set, this master can read that particular region 
through register accesses. 
Host CPU/ BIOS Master Region Read Access. If the bit is set, this master can read 
17 


that particular region through register accesses. 
Bit 17 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


Flash Descriptor Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 


Requester ID. This is the Requester ID of the Host processor. This must be set to 
0000h. 
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22.2.4.2 





FLMSTR2—Flash Master 2 (ME) (Flash Descriptor Registers) 


Memory Address: FMBA + 004h Default Value: h 
Size: 32 bits 


es 
31:29 | Reserved, must be zero 


Platform Data Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


GbE Region Write Access. If the bit is set, this master can erase and write that 
particular region through register accesses. 


a ME Master Region Write Access. If the bit is set, this master can erase and write 
26 that particular region through register accesses. 


Bit 26 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


Host CPU/ BIOS Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


Flash Descriptor Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


23:21 | Reserved, must be zero 

20 Platform Data Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 

19 GbE Region Read Access. If the bit is set, this master can read that particular region 
through register accesses. 
ME Master Region Read Access. If the bit is set, this master can read that particular 

18 region through register accesses. 
Bit 18 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


Host CPU/ BIOS Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 


Flash Descriptor Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 


Requester ID. This is the Requester ID of the Management Engine. This must be set 
to 0000h. 
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22.2.4.3 FLMSTR3—Flash Master 3 (GbE) (Flash Descriptor Registers) 


Memory Address: FMBA + 008h Default Value: h 
Size: 32 bits 


ame wee 
|Reserved,mustbezero must be zero 


ee eS eed Data Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


GbE Master Region Write Access. If the bit is set, this master can erase and write 
that particular region through register accesses. 

Bit 27 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


z ME Region Write Access. If the bit is set, this master can erase and write that 


particular region through register accesses. 


Host CPU/ BIOS Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


Flash Descriptor Region Write Access. If the bit is set, this master can erase and 
write that particular region through register accesses. 


23:21 | Reserved, must be zero 


Platform Data Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 


GbE Master Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 

Bit 19 is a don’t care as the primary master always has read/write permissions to it’s 
primary region 


ME Region Read Access. If the bit is set, this master can read that particular region 
through register accesses. 

Host CPU/ BIOS Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 

Flash Descriptor Region Read Access. If the bit is set, this master can read that 
particular region through register accesses. 


Requester ID. This is the Requester ID of the GbE. This must be set to 0218h. 
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22.2.5 Descriptor Upper Map Section 


22.2.5.1 FLUMAP1—Flash Upper Map 1 (Flash Descriptor Registers) 


Memory Address: FDBAR + EFCh Default Value: OQOOOFFFFh 
Size: 32 bits 


[ans [oer [estos 
31:16 | 0 Reserved 


ME VSCC Table Length (VTL). Identifies the 1s based number of 
15:8 1 DWORDS contained in the VSCC Table. Each SPI component entry in the 
table is 2 DWORDS long. 


ME VSCC Table Base Address (VTBA). This identifies address bits 

[11:4] for the VSCC Table portion of the Flash Descriptor. Bits [24:12] 

and bits [3:0] are 0. 

NOTE: VTBA should be above the offset for MCHSTRPO and below 
FLUMAPI. It is recommended that this address is set based on 
the anticipated maximum number of different flash parts entries. 
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22.2.6 ME Vendor Specific Component Capabilities Table 


Entries in this table allow support for a SPI flash part for Intel® Active Management 
Technology, Intel’s implementation of ASF 2.0 and Intel® Quiet System Technology. 
BIOS will still need to set up the proper VSCC registers for BIOS and Integrated Gigabit 
Ethernet usage. 


Each VSCC table entry is composed of two 32 bit fields: JEDEC 1D and the 
corresponding VSCC value. 


22.2.6.1 JjIiDO—JEDEC-ID O Register (Flash Descriptor Registers) 


Memory Address: VTBA + 000h Default Value: 
Size: 32 bits 


Pa sino 


SPI Component Device ID 1. This field identifies the second byte of the Device ID of 
23:16 | the SPI Flash Component. This is the third byte returned by the Read J EDEC-ID 


command (opcode 9Fh). 


SPI Component Device | D 0. This field identifies the first byte of the Device ID of the 
15:8 | SPI Flash Component. This is the second byte returned by the Read J EDEC-ID 
command (opcode 9Fh). 


SPI Component Vendor ID. This field identifies the one byte Vendor ID of the SPI 
7:0 Flash Component. This is the first byte returned by the Read JEDEC-ID command 


(opcode 9Fh). 





22.2.6.2 vscco0—Vendor Specific Component Capabilities 0 (Flash Descriptor 


Registers) 
Memory Address: VTBA + 004h Default Value: 
Size: 32 bits 
Note: In this table “Lower” applies to characteristics of all flash space below the Flash 


Partition Boundary Address (FPBA). “Upper” applies to characteristics of all flash space 
above the FPBA. 


Co 
31:16 Lower Erase Opcode (LEO). This register must be programmed with the Flash erase 
, instruction opcode that corresponds to the erase size that is in LBES. 


register. 
NOTES: 
1. This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This 
may lead to premature flash wear out. 
Bit 20 and bit 19 should NOT be both set to ‘1’ 





Lower Write Enable on Write Status (LWEWS). 
0 = No write to the SPI flash’s status register required prior to a write 
1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. O6h is the opcode used to unlock the Status 
20 
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Lower Write Status Required (LWSR). 

0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. 50h is the opcode used to unlock the Status 
register. 

NOTES: 

aL Bit 20 and bit 19 should NOT be both set to ‘1’. 

2. Bit 19 should not be set if the flash part does not support the opcode 50h to 

unlock the status register. 

Lower Write Granularity (LWG). 

0 =1 Byte 

1 = 64 Byte 

Lower Block/ Sector Erase Size (LBES). This field identifies the erasable 

sector size for all Flash space below the flash partition boundary address. 

00 = 256 Byte 

01 = 4K Byte 

10 = 8K Byte 

11 = 64K Byte 


15:8 Upper Erase Opcode (UEO). This register must be programmed with the Flash erase 
: instruction opcode that corresponds to the erase size that is in LBES. 


Upper Write Enable on Write Status (UWEWS). 
0 = No write to the SPI flash’s status register required prior to a write 


1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. O6h is the opcode used to unlock the Status 
register. 


This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. This 
may lead to premature flash wear out. 
Bit 4 and bit 3 should NOT be both set to ‘1’. 

Upper Write Status Required (UWSR). 

0 = No requirement to write to the Status Register prior to a write 


0 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. 50h is the opcode used to unlock the Status 
register. 


Bit 4 and bit 3 should NOT be both set to ‘1’. 
Bit 3 should not be set if the flash part does not support the opcode 50h to 
unlock the status register. 


Upper Write Granularity (UWG). 


1 = 64 Bytes 

Upper Block/ Sector Erase Size (UBES). This field identifies the erasable sector size 
for all Flash components. 

00 = 256 Bytes 

01 = 4 KB 

10 = 8 KB 

11 = 64 KB 
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22.2.6.3 


Note: 


22.2.6.4 


Note: 


Note: 


858 


jJ|1Dn—J EDEC-ID Register n (Flash Descriptor Registers) 


Memory Address: VTBA + (n*8)h Default Value: 
Size: 32 bits 


“n” is an integer denoting the index of the ME VSCC table. 


Pee inno 


SPI Component Device ID 1. This field identifies the second byte of the Device ID of 
23:16 | the SPI Flash Component. This is the third byte returned by the Read J EDEC-ID 


command (opcode 9Fh). 
SPI Component Device ID 0. This field identifies the first byte of the Device ID of 


15:8 | the SPI Flash Component. This is the second byte returned by the Read J EDEC-ID 
command (opcode 9Fh). 
pre SPI Component Vendor ID. This field identifies the one byte Vendor ID of the SPI 
7:0 


Flash Component. This is the first byte returned by the Read JEDEC-ID command 
(opcode 9Fh). 





vsCcCn—Vendor Specific Component Capabilities n (Flash Descriptor 
Registers) 


Memory Address: VTBA + 004h + (n*8)h_ Default Value: 
Size: 32 bits 


“n” is an integer denoting the index of the ME VSCC table. 


In this table “Lower” applies to characteristics of all flash space below the Flash 
Partition Boundary Address (FPBA). “Upper” applies to characteristics of all flash space 
above the FPBA. 


os 
31:16 Lower Erase Opcode (LEO). This field must be programmed with the Flash erase 
, instruction opcode that corresponds to the erase size that is in LBES. 


Lower Write Enable on Write Status (LWEWS). 


0 = No write to the SPI flash’s status register required prior to a write 
1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. O6h is the opcode used to unlock the Status 


20 register. 
NOTES: 
1. This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. 
This may lead to premature flash wear out. 
: Bit 20 and bit 19 should NOT be both set to ‘1’. 
Lower Write Status Required (LWSR). 
0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 

to unlock the flash component. 50h is the opcode used to unlock the Status 
19 register. 
NOTES: 
iF Bit 20 and bit 19 should NOT be both set to ‘1’. 


2. Bit 19 should not be set if the flash part does not support the opcode 50h to 
unlock the status register. 
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Lower Write Granularity (LWG). 
0 =1 Byte 
1 = 64 Byte 
Lower Block/ Sector Erase Size (LBES). This field identifies the erasable 
sector size for all Flash space below the flash partition boundary address. 
Valid Bit Settings: 
0 = 256 Byte 
01 =4kKB 
10 = 8 KB 
11 = 64 KB 
15:8 Upper Erase Opcode (UEO). This field must be programmed with the Flash erase 
instruction opcode that corresponds to the erase size that is in LBES. 
7:5 


Upper Write Enable on Write Status (UWEWS). 

0 = No write to the SPI flash’s status register required prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. O6h is the opcode used to unlock the Status 
register. 


This bit should not be set to ‘1’ if the SPI flash status regiser is non-volatile. 
This may lead to premature flash wear out. 
Bit 4 and bit 3 should NOT be both set to ‘1’. 


Upper Write Status Required (UWSR). 


0 = No requirement to write to the Status Register prior to a write 

1 = A write of 00h to the SPI flash’s status register is required prior to write and erase 
to unlock the flash component. 50h is the opcode used to unlock the Status 
register. 


Bit 4 and bit 3 should NOT be both set to ‘1’. 
Bit 3 should not be set if the flash part does not support the opcode 50h to 
unlock the status register. 
Upper Write Granularity (UWG). 
0=1 Byte 
1 = 64 Bytes 
Upper Block/ Sector Erase Size (UBES). This field identifies the erasable sector size 
for all Flash components. 
00 = 256 Bytes 
01 = 4 K Bytes 
10 = 8 K Bytes 
11 = 64K Bytes 
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22.4 


Note: 


Table 22-2. 


860 


OEM Section 


Memory Address: FOOh Default Value: 
Size: 256 Bytes 


256 Bytes are reserved at the top of the Flash Descriptor for use by the OEM. The 
information stored by the OEM can only be written during the manufacturing process as 
the Flash Descriptor read/write permissions must be set to Read Only when the 
computer leaves the manufacturing floor. The ICH Flash controller does not read this 
information. FFh is suggested to reduce programming time. 


GbE SPI Flash Program Registers 


The GbE Flash registers are memory-mapped with a base address MBARB found in the 
GbE LAN register chapter Device 25: Function 0: Offset 14h. The individual registers 
are then accessible at MBARB + Offset as indicated in the following table. 


These memory mapped registers must be accessed in byte, word, or dword quantities. 
These register are only applicable when SPI flash is used in descriptor mode. 


Gigabit LAN SPI Flash Program Register Address Map 
(GbE LAN Memory Mapped Configuration Registers) (Sheet 1 of 2) 


MBARB + ; 
ee  iemenie | iacers — j petaure | access | 
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Table 22-2. Gigabit LAN SPI Flash Program Register Address Map 
(GbE LAN Memory Mapped Configuration Registers) (Sheet 2 of 2) 


MBARB + ; 
Offset | Mnemonic Register Name | betaute | 


22.4.1 


; : 00000000 
98h- 9Fh Opcode Menu Configuration 00000000h 


GLFPR - Gigabit LAN Flash Primary Region Register 
(GbE LAN Memory Mapped Configuration Registers) 





96h- 97h OPTYPE Opcode Type Configuration 0000h P| 


Memory Address: MBARB + 00h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


2 a eee 


GbE Flash Primary Region Limit (PRL)— RO. This specifies address bits 24:12 for 
28:16 the Primary Region Limit. 


The value in this register loaded from the contents in the Flash 
Descriptor. FLREG3.Region Limit 


GbE Flash Primary Region Base (PRB) — RO. This specifies address bits 24:12 for 
12:0 the Primary Region Base 


The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG3.Region Base 
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Serial Peripheral Interface (SPI) 


HSFS—Hardware Sequencing Flash Status Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 04h Attribute: RO, R/WC, R/W 
Default Value: 0000h Size: 16 bits 


a 


Flash Configuration Lock-Down (FLOCKDN)— R/W. When set to 1, those Flash 
Program Registers that are locked down by this FLOCKDN bit cannot be written. Once 
set to 1, this bit can only be cleared by a hardware reset due to a global reset or host 
partition reset in an ME enabled system. 


Flash Descriptor Valid (FDV)— RO. This bit is set to a 1 if the Flash Controller read 
the correct Flash Descriptor Signature. 

If the Flash Descriptor Valid bit is not ‘1’, software cannot use the Hardware Sequencing 
registers, but must use the software sequencing registers. Any attempt to use the 
Hardware Sequencing registers will result in the FCERR bit being set. 


Flash Descriptor Override Pin Strap Status (FDOPSS)— RO. This bit reflects the 
value the Flash Descriptor Override Pin-Strap. 

0 = No override 

1 = The Flash Descriptor Override strap is set 


SPI Cycle In Progress (SCIP)— RO. Hardware sets this bit when software sets the 
Flash Cycle Go (FGO) bit in the Hardware Sequencing Flash Control register. This bit 

5 remains set until the cycle completes on the SPI interface. Hardware automatically sets 
and clears this bit so that software can determine when read data is valid and/or when 


it is safe to begin programming the next command. Software must only program the 
next command when this bit is 0. 


Block/ Sector Erase Size (BERASE) — RO. This field identifies the erasable sector 
size for all Flash components. 


00 = 256 Byte 


01 =4K Byte 

10 = 8 K Byte 

11 = 64 K Byte 

If the FLA is less than FPBA then this field reflects the value in the LVSCC.LBES register. 


If the FLA is greater or equal to FPBA then this field reflects the value in the 
UVSCC.UBES register. 


Access Error Log (AEL)— R/W/C. Hardware sets this bit to a 1 when an attempt was 
made to access the BIOS region using the direct access method or an access to the 
BIOS Program Registers that violated the security restrictions. This bit is simply a log of 
an access security violation. This bit is cleared by software writing a ‘1’ 


Flash Cycle Error (FCERR) — R/W/C. Hardware sets this bit to 1 when an program 
register access is blocked to the FLASH due to one of the protection policies or when 
any of the programmed cycle registers is written while a programmed access is already 
in progress. This bit remains asserted until cleared by software writing a 1 or until 
hardware reset occurs due to a global reset or host partition reset in an ME enabled 
system. Software must clear this bit before setting the FLASH Cycle GO bit in this 
register. 


Flash Cycle Done (FDONE) — R/W/C. The ICH sets this bit to 1 when the SPI Cycle 
completes after software previously set the FGO bit. This bit remains asserted until 
cleared by software writing a 1 or hardware reset due to a global reset or host partition 
reset in an ME enabled system. When this bit is set and the SPI SMI# Enable bit is set, 
an internal signal is asserted to the SMI# generation block. Software must make sure 
this bit is cleared prior to enabling the SPI SMI# assertion for a new programmed 
access. 
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22.4.3 


22.4.4 


HSFC—Hardware Sequencing Flash Control Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 06h Attribute: R/W, R/WS 
Default Value: 0000h Size: 16 bits 


a re 
15:10 | Reserved 


Flash Data Byte Count (FDBC) — R/W. This field specifies the number of bytes to 
shift in or out during the data portion of the SPI cycle. The content’s of this register are 
Os based with Ob representing 1 byte and 11b representing 4 bytes. The number of 
bytes transferred is the value of this field plus 1. 


This field is ignored for the Block Erase command. 
Reserved 


FLASH Cycle (FCYCLE) — R/W. This field defines the Flash SPI cycle type generated 
to the FLASH when the FGO bit is set as defined below: 
00 = Read (1 up to 4 bytes by setting FDBC) 
ean 01 = Reserved 
10 = Write (1 up to 4 bytes by setting FDBC) 
11 = Block Erase 


Flash Cycle Go (FGO) — R/W/S. A write to this register with a ‘1’ in this bit initiates a 
request to the Flash SPI Arbiter to start a cycle. This register is cleared by hardware 
when the cycle is granted by the SPI arbiter to run the cycle on the SPI bus. When the 
cycle is complete, the FDONE bit is set. 

Software is forbidden to write to any register in the HSFLCTL register between the FGO 
bit getting set and the FDONE bit being cleared. Any attempt to violate this rule will be 
ignored by hardware. 

Hardware allows other bits in this register to be programmed for the same transaction 
when writing this bit to 1. This saves an additional memory write. 

This bit always returns 0 on reads. 





FADDR—Flash Address Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + O8h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


SPI Read or Write cycle or an address within a Block for the Block Erase command. The 
Flash Linear Address must fall within a region for which BIOS has access permissions. 





peo Flash Linear Address (FLA) — R/W. The FLA is the starting byte linear address of a 
24:0 
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Serial Peripheral Interface (SPI) 


FDATAO—Flash Data O Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 10h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


a 


Flash Data 0 (FDO) — R/W. This field is shifted out as the SPI Data on the Master-Out 
Slave-In Data pin during the data portion of the SPI cycle. 


This register also shifts in the data from the Master-In Slave-Out pin into this register 
during the data portion of the SPI cycle. 


The data is always shifted starting with the least significant byte, msb to Isb, followed 


by the next least significant byte, msb to Isb, etc. Specifically, the shift order on SPI in 
terms of bits within this register is: 7-6-5-4-3-2-1-0-15-14-13-..8-23-22-...16-31..24 
Bit 24 is the last bit shifted out/in. There are no alignment assumptions; byte 0 always 
represents the value specified by the cycle address. 

Note that the data in this register may be modified by the hardware during any 
programmed SPI transaction. Direct Memory Reads do not modify the contents of this 
register. 
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22.4.6 


FRAP—Flash Regions Access Permissions Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 50h Attribute: RO, R/W 
Default Value: 00000808h Size: 32 bits 


31:28 | Reserved 


GbE Master Write Access Grant (GMWAG) — R/W. Each bit 27:25 corresponds to 
Master[3:1]. GbE can grant one or more masters write access to the GbE region 3 
overriding the permissions in the Flash Descriptor. 

Master[1] is Host CPU/BIOS, Master[2] is Management Engine, Master[3] is Host 
processor/GbE. 

The contents of this register are locked by the FLOCKDN bit. 


GbE Master Read Access Grant (GMRAG) — R/W. Each bit 19:17 corresponds to 
Master[3:1]. GbE can grant one or more masters read access to the GbE region 3 
overriding the read permissions in the Flash Descriptor. 

Master[1] is Host processor/BIOS, Master[2] is Management Engine, Master[3] is GbE. 
The contents of this register are locked by the FLOCKDN bit 


ey 


GbE Region Write Access (GRWA) — RO. Each bit 11:8 corresponds to Regions 3:0. 
If the bit is set, this master can erase and write that particular region through register 
accesses. 

11:8 | The contents of this register are that of the Flash Descriptor. Flash Master 3.Master 
Region Write Access OR a particular master has granted GbE write permissions in their 
Master Write Access Grant register OR the Flash Descriptor Security Override strap is 
set. 


GbE Region Read Access (GRRA) — RO. Each bit 3:0 corresponds to Regions 3:0. If 
the bit is set, this master can read that particular region through register accesses. 
The contents of this register are that of the Flash Descriptor. Flash Master 3.Master 
Region Write Access OR a particular master has granted GbE read permissions in their 
Master Read Access Grant register. 





. 
- 
E 
Eas 
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22.4.9 
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FREGO—Flash Region 0 (Flash Descriptor) Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 54h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


a 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region O Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor.FLREGO.Region Limit 


Region Base (RB) — RO. This specifies address bits 24:12 for the Region 0 Base 
12:0 The value in this register is loaded from the contents in the Flash 


Descriptor.FLREGO.Region Base 





FREG1—Flash Region 1 (BIOS Descriptor) Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 58h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


a 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 1 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 
Descriptor. FLREG1.Region Limit. 
Region Base (RB) — RO. This specifies address bits 24:12 for the Region 1 Base 
12:0 The value in this register is loaded from the contents in the Flash 


Descriptor FLREG1.Region Base. 





FREG2—Flash Region 2 (ME) Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 5Ch Attribute: RO 
Default Value: 00000000h Size: 32 bits 


a 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 2 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG2.Region Limit. 


Region Base (RB) — RO. This specifies address bits 24:12 for the Region 2 Base 
12:0 | The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG2.Region Base. 
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22.4.10 


22.4.11 


Note: 


FREG3—Flash Region 3 (GbE) Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 60h Attribute: RO 
Default Value: 00000000h Size: 32 bits 


| aa 
31:29 | Reserved 


Region Limit (RL) — RO. This specifies address bits 24:12 for the Region 3 Limit. 
28:16 | The value in this register is loaded from the contents in the Flash 


Descriptor. FLREG3.Region Limit. 


15:13 | Reserved 
Region Base (RB) — RO. This specifies address bits 24:12 for the Region 3 Base 
12:0 | The value in this register is loaded from the contents in the Flash 


Descriptor FLREG3.Region Base. 





PRO—Protected Range O Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 74h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register can not be written when the FLOCKDN bit is set to 1. 


a 
Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 fields in this register are valid and that writes and erases directed to addresses between 


them (inclusive) must be blocked by hardware. The base and limit fields are ignored 
when this bit is cleared. 


Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 
28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 
, FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.4.12 PR1—Protected Range 1 Register 


Note: 


868 


(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 78h Attribute: R/W 
Default Value: 00000000h Size: 32 bits 


This register can not be written when the FLOCKDN bit is set to 1. 


a 
pe Write Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
31 


fields in this register are valid and that writes and erases directed to addresses between 
them (inclusive) must be blocked by hardware. The base and limit fields are ignored 
when this bit is cleared. 


Protected Range Limit — R/W. This field corresponds to FLA address bits 24:12 and 

28:16 specifies the upper limit of the protected range. Address bits 11:0 are assumed to be 

: FFFh for the limit comparison. Any address greater than the value programmed in this 
field is unaffected by this protected range. 


(inclusive) must be blocked by hardware. The base and limit fields are ignored when 
this bit is cleared. 


Protected Range Base — R/W. This field corresponds to FLA address bits 24:12 and 
12:0 specifies the lower base of the protected range. Address bits 11:0 are assumed to be 


Read Protection Enable — R/W. When set, this bit indicates that the Base and Limit 
15 fields in this register are valid and that read directed to addresses between them 


000h for the base comparison. Any address less than the value programmed in this 
field is unaffected by this protected range. 
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22.4.13 SSFS—Software Sequencing Flash Status Register 


Note: 


(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 90h Attribute: RO, R/WC 
Default Value: 00h Size: 8 bits 


The Software Sequencing control and status registers are reserved if the hardware 
sequencing control and status registers are used. 


a 


7:5 Reserved 


Access Error Log (AEL) — RO. This bit reflects the value of the Hardware Sequencing 
Status AEL register. 


Flash Cycle Error (FCERR) — R/WC. Hardware sets this bit to 1 when a programmed 
access is blocked from running on the SPI interface due to one of the protection policies 
or when any of the programmed cycle registers is written while a programmed access is 
already in progress. This bit remains asserted until cleared by software writing a 1 or 
hardware reset due to a global reset or host partition reset in an ME enabled system. 


Cycle Done Status — R/WC. The ICH sets this bit to 1 when the SPI Cycle completes 

(i.e., SCIP bit is 0) after software sets the GO bit. This bit remains asserted until 

cleared by software writing a 1 or hardware reset due to a global reset or host partition 
2 


reset in an ME enabled system. When this bit is set and the SPI SMI # Enable bit is set, 
an internal signal is asserted to the SMI# generation block. Software must make sure 
this bit is cleared prior to enabling the SPI SMI# assertion for a new programmed 
access. 


SPI Cycle In Progress (SCIP) — RO. Hardware sets this bit when software sets the 
SPI Cycle Go bit in the Command register. This bit remains set until the cycle completes 
on the SPI interface. Hardware automatically sets and clears this bit so that software 


can determine when read data is valid and/or when it is safe to begin programming the 
next command. Software must only program the next command when this bit is 0. 
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22.4.14 SSFC—Software Sequencing Flash Control Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 91h Attribute: R/W 
Default Value: 000000h Size: 24 bits 


a 


SPI Cycle Frequency (SCF) — R/W. This register sets frequency to use for all SPI 
software sequencing cycles (write, erase, fast read, read status, etc.) except for the 
read cycle which always run at 20MHz. 
18:16 | 000 = 20 MHz 
15 


001 = 33 MHz 
All other values = Reserved. 
This register is locked when the SPI Configuration Lock-Down bit is set. 


Reserved 


Data Cycle (DS) — R/W. When set to 1, there is data that corresponds to this 
transaction. When 0, no data is delivered for this cycle, and the DBC and data fields 
themselves are don’t cares 


Data Byte Count (DBC) — R/W. This field specifies the number of bytes to shift in or 
out during the data portion of the SPI cycle. The valid settings (in decimal) are any 
value from 0 to 3. The number of bytes transferred is the value of this field plus 1. 
Note that when this field is OOb, then there is 1 byte to transfer and that 11b means 
there are 4 bytes to transfer. 


Cycle Opcode Pointer (COP) — R/W. This field selects one of the programmed 
opcodes in the Opcode Menu to be used as the SPI Command/Opcode. In the case of an 
Atomic Cycle Sequence, this determines the second command. 


Sequence Prefix Opcode Pointer (SPOP) — R/W. This field selects one of the two 
programmed prefix opcodes for use when performing an Atomic Cycle Sequence. A 
value of 0 points to the opcode in the least significant byte of the Prefix Opcodes 
register. By making this programmable, the ICH supports flash devices that have 
different opcodes for enabling writes to the data space vs. status register. 


Atomic Cycle Sequence (ACS) — R/W. When set to 1 along with the SCGO assertion, 
the ICH will execute a sequence of commands on the SPI interface without allowing the 
LAN component to arbitrate and interleave cycles. The sequence is composed of: 


« Atomic Sequence Prefix Command (8-bit opcode only) 

¢« Primary Command specified below by software (can include address and data) 

¢ Polling the Flash Status Register (opcode 05h) until bit 0 becomes Ob. 
The SPI Cycle in Progress bit remains set and the Cycle Done Status bit remains unset 
until the Busy bit in the Flash Status Register returns 0. 


SPI Cycle Go (SCGO) — R/WS. This bit always returns 0 on reads. However, a write to 
this register with a ‘1’ in this bit starts the SPI cycle defined by the other bits of this 
register. The “SPI Cycle in Progress” (SCIP) bit gets set by this action. Hardware must 
ignore writes to this bit while the Cycle In Progress bit is set. 

Hardware allows other bits in this register to be programmed for the same transaction 
when writing this bit to 1. This saves an additional memory write. 


Reserved 
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22.4.15 PREOP—Prefix Opcode Configuration Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 94h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


rr ee 


15:8 


Prefix Opcode 1— R/W. Software programs an SPI opcode into this field that is 


15:6 | permitted to run as the first command in an atomic cycle sequence. 
7:0 Prefix Opcode 0 — R/W. Software programs an SPI opcode into this field that is 
, permitted to run as the first command in an atomic cycle sequence. 





NOTE: This register is not writable when the SPI Configuration Lock-Down bit (MBARB + 00h:15) 
is set. 


22.4.16 OPTYPE—Opcode Type Configuration Register 
(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 96h Attribute: R/W 
Default Value: 0000h Size: 16 bits 


Entries in this register correspond to the entries in the Opcode Menu Configuration 
register. 


Note: The definition below only provides write protection for opcodes that have addresses 
associated with them. Therefore, any erase or write opcodes that do not use an address 
should be avoided (for example, “Chip Erase” and “Auto-Address Increment Byte 
Program”). 


se 
[5:8 [Opcode Type #— AMI Seethe desciptonforbisO 


Opcode Type 1 — R/W. See the description for bits 1:0 


Opcode Type 0 — R/W. This field specifies information about the corresponding 

Opcode 0. This information allows the hardware to 1) know whether to use the address 

field and 2) provide BIOS and Shared Flash protection capabilities. The encoding of the 
1:0 


two bits is: 

00 = No address associated with this Opcode; Read cycle type 
01 = No address associated with this Opcode; Write cycle type 
10 = Address required; Read cycle type 

11 = Address required; Write cycle type 





NOTE: This register is not writable when the SPI Configuration Lock-Down bit (MBARB + 00h:15) 
is set. 
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22.4.17 OPMENU—Opcode Menu Configuration Register 


Note: 


872 


(GbE LAN Memory Mapped Configuration Registers) 


Memory Address: MBARB + 98h Attribute: R/W 
Default Value: 0000000000000000h Size: 64 bits 


Eight entries are available in this register to give GbE a sufficient set of commands for 
communicating with the flash device, while also restricting what malicious software can 
do. This keeps the hardware flexible enough to operate with a wide variety of SPI 
devices. 


It is recommended that GbE avoid programming Write Enable opcodes in this menu. 
Malicious software could then perform writes and erases to the SPI flash without using 
the atomic cycle mechanism. This could cause functional failures in a shared flash 
environment. Write Enable opcodes should only be programmed in the Prefix Opcodes. 


a 


7:0 Allowable Opcode O — R/W. Software programs an SPI opcode into this field for use 
7 when initiating SPI commands through the Control Register. 


This register is not writable when the SPI Configuration Lock-Down bit (MBARB + 
00h: 15) is set. 





§§ 
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23 


23:1 


Thermal Sensor Registers 
(D31:F6) 


PCI Bus Configuration Registers 


Table 23-1. Thermal Sensor Register Address Map 


[onset [enone | __revterNane [peut | Tre 
Poonam [vio [Vvendorraericaton _———~+|_—aveen——| RO 
Foan-o5h [oro [Device entcaion ‘| _sasen_ | FO 
oer [ aio [Revsonto ——SSS* mR 
een [mt [roaremming interface +f oon | RO 
[oan [See [Sub cass code ———SSS*d tome «RO 
[os [ace [Base cess coe Stan 
[och [ats [eacnetine size ———SSS*d tom « RO 
00h [oF fiateney timer «tom 
[och [wire [Hester tyne ——SSSS*i tom 
of [sist [Buitinserret «ito —*f ro 
[aan-imh [TeaRn [Thermal Base Adcess High DWord | 90000000 [FO 
[san [Ga PTR _[Cepabities Pointer <i som «d= 
—30n[ wren [intewunerin «Tran 
[son-sin [PID [Power Menagementaeries [000i | RO 
[san-5an [PC [Power Nenagemertcapaiies | 0000 | RO 
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23.1.1 Vi D—Vendor Identification 


Offset Address: OOh-0O1h Attribute: RO 
Default Value: 8086h Size: 16 bit 
Lockable: No Power Well: Core 


a 





15:0 | Vendor ID — RO. This is a 16-bit value assigned to Intel. Intel VID = 8086h 


23.1.2 DI D—Device | dentification 


Offset Address: 0O2h-03h Attribute: RO 
Default Value: 3A32h Size: 16 bit 


etn 





15:0 | Device 1D (DID) — RO. Indicates the device number assigned by the SIG. 


23.1.3 CMD—Command 


Address Offset: O4h-O05h Attribute: RO, R/W 
Default Value: 0000h Size: 16 bits 


a 


Interrupt Disable (1D) — RW. Enables the device to assert an INTx#. 


0 = When cleared, the INTx# signal may be asserted. 
1 = When set, the Thermal logic’s INTx# signal will be de-asserted. 


FBE (Fast Back to Back Enable) — RO. Not implemented. Hardwired to 0. 
SEN (SERR Enable) — RO. Not implemented. Hardwired to 0. 

WCC (Wait Cycle Control) — RO. Not implemented. Hardwired to 0. 
PER (Parity Error Response) — RO. Not implemented. Hardwired to 0. 


MWI (Memory Write and Invalidate Enable) — RO. Not implemented. Hardwired to 0. 


SCE (Special Cycle Enable) — RO. Not implemented. Hardwired to 0. 
BME (Bus Master Enable) — RO. Not implemented. Hardwired to 0. 


Memory Space Enable (MSE) — RW. 
0 = Disable 
1 = Enable. Enables memory space accesses to the Thermal registers. 


10S (1/O Space) — RO. The Thermal logic does not implement |O Space; therefore, 
this bit is hardwired to 0. 





| 9 | 
zs 
ae 
[ae] 
za VPS (VGA Palette Snoop) — RO. Not implemented. Hardwired to 0. 
Ea 
aed 
Eee 
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23.1.4 


23.1.5 


23.1.6 


STS—Status 
Address Offset: O6h-07h Attribute: R/WC, RO 
Default Value: 0010h Size: 16 bits 


Detected Parity Error (DPE) — R/WC. This bit is set whenever a parity error is seen 
on the internal interface for this function, regardless of the setting of bit 6 in the 
command register. Software clears this bit by writing a ‘1’ to this bit location. 


Ea 

SERR# Status (SERRS) — RO. Not implemented. Hardwired to 0. 

Received Master Abort (RMA) — RO. Not implemented. Hardwired to 0. 

Received Target Abort (RTA) — RO. Not implemented. Hardwired to 0. 

Signaled Target-Abort (STA) — RO. Not implemented. Hardwired to 0. 

DEVSEL# Timing Status (DEVT) — RO. Does not apply. Hardwired to 0. 
Master Data Parity Error (MDPE) — RO. Not implemented. Hardwired to 0. 
Fast Back to Back Capable (FBC) — RO. Does not apply. Hardwired to 0. 


Reserved 


66 MHz Capable (C66) — RO. Does not apply. Hardwired to 0. 

Capabilities List Exists (CLIST) — RO. Indicates that the controller contains a 
capabilities pointer list. The first item is pointed to by looking at configuration offset 
34h. 


Interrupt Status (1S) — RO. Reflects the state of the INTx# signal at the input of the 
enable/disable circuit. This bit is a 1 when the INTx# is asserted. This bit is a O after 
the interrupt is cleared (independent of the state of the Interrupt Disable bit in the 
command register). 


Reserved 


RI D—Revision I dentification 





Address Offset: O8h Attribute: RO 
Default Value: 00h Size: 8 bits 


ES rr ee 


Revision ID (RID) — RO. Indicates the device specific revision identifier. 





PI — Programming Interface 


Address Offset: O9h Attribute: RO 
Default Value: 00h Size: 8 bits 


| it | Description 





7:0 Programming Interface (PI) — RO. ICH Thermal logic has no standard 
: programming interface. 
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23.1.7 SCC—Sub Class Code 


Address Offset: OAh Attribute: RO 
Default Value: 80h Size: 8 bits 


a 





23.1.8 BCC—Base Class Code 


Address Offset: OBh Attribute: RO 
Default Value: 11h Size: 8 bits 


7 N.Y 
Base Class Code (BCC) — RO. Value assigned to ICH Thermal logic. 


23.1.9 CLS—Cache Line Size 


Address Offset: OCh Attribute: RO 
Default Value: 00h Size: 8 bits 


es 
Cache Line Size (CLS) — RO. Does not apply to PCI Bus Target- only devices. 


23.1.10 LT—Latency Timer 


Address Offset: ODh Attribute: RO 
Default Value: 00h Size: 8 bits 


oe 
Latency Timer (LT) — RO. Does not apply to PCI Bus Target-only devices. 


23.1.11 HTYPE—Header Type 


Address Offset: OEh Attribute: RO 
Default Value: 00h Size: 8 bits 


RS 


Multi-Function Device (MFD) — RO. This bit is 0 because a multi-function device 











only needs to be marked as such in Function 0, and the Thermal registers are not in 
Function 0. 


| 6:0 | Header Type (HTYPE) — RO. Implements Type 0 Configuration header. 
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23.1.12 BIST—Built-in Self Test 


Address Offset: OFh Attribute: RO 
Default Value: 00h Size: 8 bits 


a 





7:0 Built-in Self Test (BIST) — RO. Not implemented. Hardwired to OOh. 


23.1.13 TBAR—Thermal Base 


Address Offset: 10h-13h Attribute: RW, RO 
Default Value: |00000004h Size: 32 bits 


This BAR creates 4K bytes of memory space to signify the base address of Thermal 
memory mapped configuration registers. This memory space is active when the 
Command (CMD) register Memory Space Enable (MSE) bit is set and either 
TBAR[31:12] or TBARH are programmed to a non-zero address. This BAR is owned by 
the Operating System, and allows the OS to locate the Thermal registers in system 
memory space. 


Thermal Base Address (TBA) — RW. This field provides the base address for the 
31:12 | Thermal logic memory mapped configuration registers. 4 KB bytes are requested by 
hardwiring bits 11:4 to Os. 


Prefetchable (PREF) — RO. Indicates that this BAR is NOT pre-fetchable. 


21 Address Range (ADDRNG) — RO. Indicates that this BAR can be located anywhere 
, in 64 bit address space. 
| 0 | Space Type (SPTYP) — RO. Indicates that this BAR is located in memory space. 
23.1.14 TBARH—Thermal Base High DWord 


Address Offset: 14h-17h Attribute: RW, RO 
Default Value: 00000000h Size: 32 bits 





This BAR extension holds the high 32 bits of the 64 bit TBAR. In conjunction with TBAR, 
it creates 4 KB of memory space to signify the base address of Thermal memory 
mapped configuration registers. 


we 





Thermal Base Address High (TBAH) — RW. TBAR bits 61:32. 
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23.1.15 SViD—Subsystem Vendor ID 


Address Offset: 2Ch-2Dh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 


The SVID register, in combination with the Subsystem ID register, enables the 
operating environment to distinguish one subsystem from the other(s). 


Software (BIOS) will write the value to this register. After that, the value can be read, 
but writes to the register will have no effect. The write to this register should be 
combined with the write to the SID to create one 32-bit write. This register is not 
affected by D3yo7 to DO reset. 


| Bit | Description 





15:0 SVID (SVID) — R/WO. This is written by BIOS. No hardware action taken on this 
, value. 


23.1.16 SIiD—Subsystem ID 


Address Offset: 2Eh-2Fh Attribute: R/WO 
Default Value: 0000h Size: 16 bits 


The SID register, in combination with the Subsystem Vendor ID register make it 
possible for the operating environment to distinguish one subsystem from the other(s). 


Software (BIOS) will write the value to this register. After that, the value can be read, 
but writes to the register will have no effect. The write to this register should be 
combined with the write to the SVID to create one 32-bit write. This register is not 
affected by D3yo7 to DO reset. 


Ee ee 





23.1.17 CAP_PTR —Capabilities Pointer 


Address Offset: 34h Attribute: RO 
Default Value: 50h Size: 8 bits 


a 


Capability Pointer (CP) — RO. Indicates that the first capability pointer offset is 
offset 50h (Power Management Capability). 





23.1.18 INTLN—Interrupt Line 


Address Offset: 3Ch Attribute: RW 
Default Value: 00h Size: 8 bits 


os 


Interrupt Line — RW. ICH9 hardware does not use this field directly. It is used to 
communicate to software the interrupt line that the interrupt pin is connected to. 
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23.1.19 


23.1.20 


23.h.e1 


INTPN—I nterrupt Pin 


Address Offset: 3Dh Attribute: RO 
Default Value: See Description Below Size: 8 bits 


a 


7:4 Reserved as Os. 





3:0 Interrupt Pin — RO. This reflects the value of bits 27:24 (TTIP) of Device 31 Interrupt 
, Pin Register in chipset configuration space. 


TBARB—BI OS Assigned Thermal Base Address 


Address Offset: 40h-43h Attribute: RW,RO 
Default Value: |00000004h Size: 32 bits 


This BAR creates 4 KB of memory space to signify the base address of Thermal memory 
mapped configuration registers. This memory space is active when TBARB.SPTYPEN is 
asserted. This BAR is owned by the BIOS, and allows the BIOS to locate the Thermal 
registers in system memory space. If both TBAR and TBARB are programmed, then the 
OS and BIOS each have their own independent “view” of the Thermal registers, and 
must use the TSIU, TCIU, and TBIU registers to denote Thermal registers ownership/ 
availability. 


et 


Thermal Base Address (TBA) — RW. This field provides the base address for the 
31:12 | Thermal logic memory mapped configuration registers. 4K B bytes are requested by 
hardwiring bits 11:4 to Os. 


Prefetchable (PREF) — RO. Indicates that this BAR is NOT pre-fetchable. 


1 Address Range (ADDRNG) — RO. Indicates that this BAR can be located anywhere 
, in 64 bit address space. 


Space Type Enable (SPTYPEN) — RW. 


0 = Disable. 
1 = Enable. When set to 1b by software, enables the decode of this memory BAR. 





TBARBH—BI OS Assigned Thermal Base High DWord 


Address Offset: 44h-47h Attribute: RW 
Default Value: 00000000h Size: 32 bits 


This BAR extension holds the high 32 bits of the 64 bit TBARB. 


a 


Thermal Base Address High (TBAH) — RW. TBAR bits 61:32. 
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23.1.22 


23.1.23 


880 


P!D—PCI Power Management Capability 1D 


Address Offset: 50h-51h Attribute: RO 
Default Value: 0001h Size: 16 bits 


a 


Next Capability (NEXT) — RO. Indicates that this is the last capability structure in 


the list. 
Cap ID (CAP) — RO. Indicates that this pointer is a PC] power management capability 


PC—Power Management Capabilities 





Address Offset: 52h-53h Attribute: RO 
Default Value: 0023h Size: 16 bits 


a 


Aux_ Current — RO. PME# from D3COLD state is not supported, therefore this field is 
000b. 


initialization is required. 


PME Clock (PMEC) — RO. Does not apply. Hardwired to 0. 


Version (VS) — RO. Indicates support for Revision 1.2 of the PCl Power Management 
Specification. 


= Device Specific I nitialization (DSI) — RO. Indicates that device- specific 
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23.1.24 PCS—Power Management Control And Status 


Address Offset: 54h-57h Attribute: RW, RO 
Default Value: 0000h Size: 32 bits 


Ls 


31:24 | Data — RO. Does not apply. Hardwired to Os. 


Bus Power/ Clock Control Enable (BPCCE) — RO. Hardwired to 0. 
B2/ B3 Support (B23) — RO. Does not apply. Hardwired to 0. 


21:16 | Reserved 


PME Status (PMES) — RO. This bit is always 0, since this PCI Function does not 
generate PME# 


Reserved 


PME Enable (PMEE) — RO. This bit is always zero, since this PCI Function does not 
generate PME# 


Reserved 


No Soft Reset — RO. When set (1), this bit indicates that devices transitioning from 
D3yotT to DO because of PowerState commands do not perform an internal reset. 
3 Configuration context is preserved. Upon transition from D3yo7 to DO initialized state, 
no additional operating system intervention is required to preserve Configuration 
Context beyond writing the PowerState bits. 


Reserved 


Power State (PS) — R/W. This field is used both to determine the current power 
state of the Thermal controller and to set a new power state. The values are: 


00 = DO state 

11 D3yot state 

If software attempts to write a value of 10b or O1b in to this field, the write operation 
must complete normally; however, the data is discarded and no state change occurs. 
When in the D3yo7 states, the Thermal controller’s configuration space is available, but 
the 1/O and memory Spaces are not. Additionally, interrupts are blocked. 

When software changes this value from the D307 state to the DO state, no internal 
warm (soft) reset is generated. 
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23.2.1 


882 


Thermal Memory Mapped Configuration Registers 
(Thermal Sensor - D31:F26) 


The base memory for these thermal memory mapped configuration registers is 
specified in the TBARB (D31:F6: Offset 40h). The individual registers are then 
accessible at TBARB + Offset. 


There are two sensors in the ICH9. Each sensor has a separate configuration register 
set. Both sensors must be configured together. 


[reer [wnemonie [Resinerneme [ett [We 
[2h [1505 [Thermal SensorOerabie ooh 
| 4h | TSOTTP Thermal Sensor 0 | Thermal Sensor 0 Catastrophic Trip Point | Trip Point | coo00000h | = R/W 


Za TSOCcO Thermal Sensor 0 Catastrophic Lock ert sear saree gga 
Down 


| OEh | TSOPC Thermal Sensor 0 Policy Control | ooh |W 


Fea] TS1TTP | Thermal Sensor 1 Catastrophic Trip Point | Point 00000000h aa 


ah | TS1C0 Thermal Sensor 1 Catastrophic Lock ee 
Down 


| 4Eh | TS1PC Thermal Sensor 1 Policy Control | ooh] RW 
TSOLOCK Thermal Sensor 0 Register Lock Control 
TSILOCK Thermal Sensor 1 Register Lock Control 


TSxE—Thermal Sensor [1:0] Enable 





Offset Address: Sensor 0: TBARB+01h Attribute: R/W 
Sensor 1: TBARB+41h 
Default Value: 00h Size: 8 bit 


inion 


Thermal Sensor Enable (TSE) — R/W. BIOS shall always program this register to 


the value BAh to enable the thermal sensor. 
All other values are reserved. 
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23.2.3 


23.2.4 


TSxS—Thermal Sensor[1:0] Status 


Offset Address: Sensor 0: TBARB+02h Attribute: RO 
Sensor 1: TBARB+42h 
Default Value: 00h Size: 8 bit 


a 


Catastrophic Trip Indicator (CTI) — RO. 


0 = The temperature is below the catastrophic setting. 
1 = The temperature is above the catastrophic setting. 


| 6:0 | Reserved 


TSxTTP—Thermal Sensor [1:0] Catastrophic Trip Point 





Offset Address: Sensor 0: TBARB+04h Attribute: R/W 
Sensor 1: TBARB+44h 
Default Value: OOh Size: 32 bit 


CS rr 


Catastrophic Trip Point Setting (CTPS) — R/W. These bits set the catastrophic trip 
point. 

BIOS will program these bits. 

These bits are lockable via TSCO.bit 7. 





TSxCO—Thermal Sensor [1:0] Catastrophic Lock-Down 


Offset Address: Sensor 0: TBARB+08h Attribute: R/W 
Sensor 1: TBARB+48h 
Default Value: 00h Size: 8 bit 


Lo 


Lock bit for Catastrophic (LBC) — R/W. 
0 = Catastrophic programming interface is unlocked 


1 = Locks the Catastrophic programming interface including TSTTP. bits[ 7:0]. 


This bit may only be set to a O by a hardware reset. Writing a 0 to this bit has no 
effect. 





6:0 _| Reserved 
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TSxPC—Thermal Sensor [1:0] Policy Control 


Offset Address: Sensor 0: TBARB+0Eh Attribute: R/W 
Sensor 1: TBARB+4Eh 
Default Value: 00h Size: 8 bit 


a 


Policy Lock-Down Bit — R/W. 


0 = This register can be programmed and modified. 
1 = Prevents writes to this register. 


NOTE: TSCO.bit 7 and TSLOCK.bit2 must also be 1 when this bit is set to 1. 
This bit may only be set to a 0 by a hardware reset. Writing a 0 to this bit has no 
effect. 


Catastrophic Power-Down Enable — R/ W. When set to 1, the power management 
logic unconditionally transitions to the S5 state when a catastrophic temperature is 
detected by the sensor. 


TSxLOCK—Thermal Sensor [1:0] Register Lock Control 





Offset Address: Sensor 0: TBARB+83h Attribute: R/W 
Sensor 1: TBARB+C3h 
Default Value: 00h Size: 8 bit 


Ceo 


Lock Control — R/ W. This bit must be set to 1 when TSPC.bit7 is set to 1. 





§§ 
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